CVE-2025-32697: Cascading protection is not preventing file reversions
Published Apr 10, 2025
·Updated
Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/editpage/IntroMessageBuilder.Php, includes/Permissions/PermissionManager.Php, includes/Permissions/RestrictionStore.Php.
This issue affects MediaWiki: before 1.42.6, 1.43.1.
Affected Software
1 affected component
Wikimedia Foundation MediaWiki<1.42.6
Event History
Apr 10, 2025
CVE Published
via MITRE·06:29 PM
Data Sourced
via MITRE·06:29 PM
DescriptionWeakness
Data Sourced
via NVD·07:16 PM
DescriptionSeverityWeakness
Dec 11, 57260
Event
via FIRST·03:56 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-32697?
CVE-2025-32697 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2025-32697?
To fix CVE-2025-32697, upgrade MediaWiki to version 1.42.6 or later.
3
What components are affected by CVE-2025-32697?
CVE-2025-32697 affects the files IntroMessageBuilder.php, PermissionManager.php, and RestrictionStore.php in MediaWiki.
4
What type of vulnerability is CVE-2025-32697?
CVE-2025-32697 is an improper preservation of permissions vulnerability.
5
Which versions of MediaWiki are vulnerable to CVE-2025-32697?
MediaWiki versions prior to 1.42.6 are vulnerable to CVE-2025-32697.