CVE-2025-62666: DoS vector through the cirrusbuilddoc query API
Allocation of Resources Without Limits or Throttling vulnerability in The Wikimedia Foundation Mediawiki - CirrusSearch Extension allows HTTP DoS.This issue affects Mediawiki - CirrusSearch Extension: from master before 1.43.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62666?
CVE-2025-62666 has been identified as a medium severity vulnerability that can lead to HTTP DoS.
How do I fix CVE-2025-62666?
To fix CVE-2025-62666, upgrade the Mediawiki - CirrusSearch Extension to version 1.43 or later.
What kind of attack does CVE-2025-62666 allow?
CVE-2025-62666 allows for HTTP Denial of Service (DoS) attacks due to resource allocation issues.
Which version of Mediawiki is affected by CVE-2025-62666?
Versions of Mediawiki - CirrusSearch Extension from master up to, but not including, 1.43 are affected by CVE-2025-62666.
Who is impacted by CVE-2025-62666?
Users and organizations utilizing the affected versions of Mediawiki - CirrusSearch Extension are impacted by CVE-2025-62666.