Skip to content
CVE PROGRAM SOURCE RECORD2.1 Low

CVE-2025-6592

Creating a permanent account from a temporary account associates temp username and IP address with real username in AbuseLog

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
wikimedia-foundation

Description

Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects AbuseFilter: from fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 before 1.43.2, 1.44.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Wikimedia Foundation AbuseFilter

Default version status: unaffected

  • fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 to < 1.43.2, 1.44.0affected

References