Skip to content
CVE PROGRAM SOURCE RECORD0.0 None

CVE-2025-67479

Magic word replacement in legacy parser allows using reserved data attributes through wikitext

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
wikimedia-foundation

Description

Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Cite. This vulnerability is associated with program files includes/Parser/CoreParserFunctions.Php, includes/Parser/Sanitizer.Php. This issue affects MediaWiki: from * before 1.39.14, 1.43.4, 1.44.1; Cite: from * before 1.39.14, 1.43.4, 1.44.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Wikimedia Foundation MediaWiki

Default version status: unaffected

  • * to < 1.39.14, 1.43.4, 1.44.1affected

Wikimedia Foundation Cite

Default version status: unaffected

  • * to < 1.39.14, 1.43.4, 1.44.1affected

References