CNNVD-202602-525 Information

CNNVD ID

CNNVD-202602-525

CVE-2025-61645

  • CNNVD Published: 2026-02-03

Description (Chinese)

MediaWiki是美国维基媒体(Wikimedia)基金会的一套自由免费的基于网络的Wiki引擎。该产品可用于部署内部的知识管理和内容管理系统。 Wikimedia Foundation MediaWiki 1.44.1之前版本存在安全漏洞,该漏洞源于输入中和不当,可能导致跨站脚本攻击。

Description (English)

MediaWiki is a free, free, web-based Wiki engine for the Wikimedia Foundation in the United States. The product can be used for the deployment of internal knowledge management and content management systems. There was a security loophole in the pre-Wikimedia Foundation MediaWiki 1.44.1 version, which originated in inappropriate input and could lead to a cross-site script attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

维基媒体

Published

2026-02-03

Last Modified

2026-02-24

References

https://phabricator.wikimedia.org/T403761

Patch

https://www.mediawiki.org/wiki/Download

Share on: