PT-2025-42688
CVE-2025-62666
·
Published
2025-10-18
·
Updated
2025-10-18
Description by
CVSS 4.0
6.9
MediumMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
Name of the Vulnerable Software and Affected Versions
Wikimedia Foundation Mediawiki - CirrusSearch Extension versions prior to 1.43
Description
A flaw exists in the Wikimedia Foundation Mediawiki - CirrusSearch Extension related to the allocation of resources without limits or throttling, which can lead to a denial-of-service (DoS) attack via HTTP.
Recommendations
Update to Mediawiki - CirrusSearch Extension version 1.43 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾