CVE-2025-32076: Evil regex used to process user-provided data in VisualData
Published Apr 11, 2025
·Updated
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Visual Data Extension allows HTTP DoS.This issue affects Mediawiki - Visual Data Extension: from 1.39 through 1.43.
Affected Software
1 affected component
Wikimedia Foundation Mediawiki - Visual Data Extension>=1.39<=1.43
Event History
Apr 11, 2025
CVE Published
via MITRE·04:23 PM
Data Sourced
via MITRE·04:23 PM
DescriptionWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-32076?
CVE-2025-32076 is classified as a high severity vulnerability due to its potential for HTTP DoS attacks.
2
How do I fix CVE-2025-32076?
To fix CVE-2025-32076, upgrade the Mediawiki - Visual Data Extension to version 1.44 or later.
3
What products are affected by CVE-2025-32076?
CVE-2025-32076 affects Mediawiki - Visual Data Extension versions from 1.39 to 1.43.
4
What type of vulnerability is CVE-2025-32076?
CVE-2025-32076 is an improper input validation vulnerability.
5
What impact does CVE-2025-32076 have?
CVE-2025-32076 can lead to denial-of-service (DoS) conditions affecting the availability of the application.