CVE-2025-61658: Special:GlobalContributions shows edits on wikis the viewer doesn't have access to
Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/GlobalContributions/GlobalContributionsPager.Php.
This issue affects CheckUser: from before 1.43.4, 1.44.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-61658?
CVE-2025-61658 has been identified as a security vulnerability in Wikimedia Foundation CheckUser, affecting versions before 1.43.4 and 1.44.1.
How do I fix CVE-2025-61658?
To mitigate CVE-2025-61658, update Wikimedia Foundation CheckUser to version 1.43.4 or 1.44.1 or later.
What does CVE-2025-61658 affect?
CVE-2025-61658 affects the GlobalContributions feature in Wikimedia Foundation CheckUser.
What kind of exposure does CVE-2025-61658 provide?
CVE-2025-61658 allows unauthorized users to view edits on wikis that they do not have access to.
Is CVE-2025-61658 an internal or external threat?
CVE-2025-61658 represents an internal security threat that compromises the visibility of private contributions.