CVE-2025-61766: Bucket vulnerable to infinite recursion when querying a bucket using the != operator
Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to version 1.0.0, infinite recursion can occur if a user queries a bucket using the != comparator. This will result in PHP's call stack limit exceeding, and/or increased memory consumption, potentially leading to a denial of service. Version 1.0.0 contains a patch for the issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-61766?
CVE-2025-61766 has a moderate severity due to the potential for infinite recursion and excessive memory consumption.
How do I fix CVE-2025-61766?
To fix CVE-2025-61766, update the MediaWiki Bucket extension to version 1.0.0 or later.
What systems are affected by CVE-2025-61766?
CVE-2025-61766 affects versions of the MediaWiki Bucket extension prior to 1.0.0.
What can happen if CVE-2025-61766 is exploited?
If exploited, CVE-2025-61766 can lead to exceeding PHP's call stack limit and significantly increased memory usage.
Is CVE-2025-61766 a code execution vulnerability?
CVE-2025-61766 is not a code execution vulnerability; it primarily leads to denial of service through resource exhaustion.