critical10.0
CVE-2025-12004
Incorrect Permission Assignment for Critical Resource vulnerability in The Wikimedia Foundation Mediawiki - Lockdown Extension allows Privilege Abuse.
Impact
Incorrect Permission Assignment for Critical Resource vulnerability in The Wikimedia Foundation Mediawiki - Lockdown Extension allows Privilege Abuse. Fixed in Mediawiki Core Action APIThis issue affects Mediawiki - Lockdown Extension: from master before 1.42.
Affected products
| Product | Affected versions |
|---|---|
| Mediawiki - Lockdown Extension: From Master | before 1.42. |
Versions were read from the advisory text. No structured product data has been published for this record yet.