Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2025-12004

The compare API module breaks Extension:Lockdown

Description

Incorrect Permission Assignment for Critical Resource vulnerability in The Wikimedia Foundation Mediawiki - Lockdown Extension allows Privilege Abuse. Fixed in Mediawiki Core Action APIThis issue affects Mediawiki - Lockdown Extension: from master before 1.42.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The Wikimedia Foundation Mediawiki - Lockdown Extension

Default version status: unaffected

  • master to < 1.42affected

References