CVE-2025-62696: Multiple critical security issues in Springboard

Published Oct 21, 2025

Updated

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in The Wikimedia Foundation Mediawiki Foundation - Springboard Extension allows Command Injection.This issue affects Mediawiki Foundation - Springboard Extension: master.

Affected Software

1 affected component

Wikimedia Foundation Springboard Extension

Event History

Oct 21, 2025

CVE Published

via MITRE·03:58 AM

Data Sourced

via MITRE·03:58 AM

DescriptionWeakness

Data Sourced

via NVD·04:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-62696?

CVE-2025-62696 is considered a high severity vulnerability due to the potential for command injection.

How does CVE-2025-62696 affect the Wikimedia Foundation Springboard Extension?

CVE-2025-62696 allows attackers to execute arbitrary commands on the server through the Springboard Extension.

How do I fix CVE-2025-62696?

To fix CVE-2025-62696, update the Wikimedia Foundation Springboard Extension to the latest patched version.

What is command injection in the context of CVE-2025-62696?

Command injection in CVE-2025-62696 occurs when an application allows unauthorized commands to be executed on the system.

Is there a known exploit for CVE-2025-62696?

As of now, there are no publicly disclosed exploits for CVE-2025-62696.