PT-2025-42930

CVE-2025-62661

·

Published

2025-10-21

·

Updated

2025-10-21

Description by

CVSS 4.0
6.9
Medium
MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
Name of the Vulnerable Software and Affected Versions Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension versions 1.43 through 1.43.99
Description A flaw exists in the Mediawiki - Thanks Extension and Mediawiki - Growth Experiments Extension where default permissions are improperly configured, leading to access of functionality that is not adequately restricted by Access Control Lists (ACLs).
Recommendations Update to version 1.44 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-276: Incorrect Default Permissions
Related identifiers
CVE-2025-62661
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com