CVE-2025-6927: Autoblocks from global account suppressions are publicly visible
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/specials/pagers/BlockListPager.Php, includes/api/ApiQueryBlocks.Php.
This issue affects MediaWiki: from >= 1.42.0 before 1.39.13, 1.42.7 1.43.2, 1.44.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6927?
CVE-2025-6927 has been classified as a medium-severity vulnerability due to the exposure of sensitive block information.
How does CVE-2025-6927 affect Wikimedia Foundation MediaWiki?
CVE-2025-6927 allows publicly visible autoblocks from global account suppressions in specified MediaWiki versions.
How do I fix CVE-2025-6927?
To mitigate CVE-2025-6927, upgrade MediaWiki to version 1.44.0 or later.
Which versions of MediaWiki are affected by CVE-2025-6927?
CVE-2025-6927 affects MediaWiki versions from 1.39.13 up to, but not including, 1.42.0 and several versions before 1.44.0.
What files are involved in CVE-2025-6927?
CVE-2025-6927 is associated with the program files includes/specials/pagers/BlockListPager.php and includes/api/ApiQueryBlocks.php.