Skip to content
CVE PROGRAM SOURCE RECORD0.3 Low

CVE-2025-61647

UserInfoCard: Don't allow access to information about users who are suppressed if you don't have suppressor rights

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
wikimedia-foundation

Description

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Api/Rest/Handler/UserInfoHandler.Php. This issue affects CheckUser: from a3dc1bbcc33acbcca6831d6afaccbb1054c93a57, 0584eb2ad564648aa3ce9c555dd044dda02b55f4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Wikimedia Foundation CheckUser

Default version status: unaffected

  • a3dc1bbcc33acbcca6831d6afaccbb1054c93a57, 0584eb2ad564648aa3ce9c555dd044dda02b55f4 to < *affected

References