Security Advisory

CVE-2025-12004

N/A
UNKNOWN

Vulnerability Description

Incorrect Permission Assignment for Critical Resource vulnerability in The Wikimedia Foundation Mediawiki - Lockdown Extension allows Privilege Abuse. Fixed in Mediawiki Core Action APIThis issue affects Mediawiki - Lockdown Extension: from master before 1.42.
Published Date October 21, 2025
Official Source NIST NVD Advisory