CVE-2025-12004

Publication date

2025-10-21 06:20:04

Family

wikimedia-foundation

State

PUBLISHED

Description

Incorrect Permission Assignment for Critical Resource vulnerability in The Wikimedia Foundation Mediawiki - Lockdown Extension allows Privilege Abuse. Fixed in Mediawiki Core Action APIThis issue affects Mediawiki - Lockdown Extension: from master before 1.42.