[Git][security-tracker-team/security-tracker][master] more mediawiki issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6e60a1b2 by Moritz Muehlenhoff at 2025-10-02T23:19:45+02:00
more mediawiki issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,18 @@
+CVE-2025-11175
+	- mediawiki <unfixed>
+	[bookworm] - mediawiki <not-affected> (Vulnerable code not present)
+	[bullseye] - mediawiki <not-affected> (Vulnerable code not present)
+	NOTE: https://phabricator.wikimedia.org/T364910
+	NOTE: https://phabricator.wikimedia.org/T396248
+CVE-2025-61652 [In API check user read permissions before showing PageInfo]
+	- mediawiki <unfixed>
+	[bookworm] - mediawiki <not-affected> (Vulnerable code not present)
+	[bullseye] - mediawiki <not-affected> (Vulnerable code not present)
+	NOTE: https://phabricator.wikimedia.org/T397580
+CVE-2025-61635 [ApiFancyCaptchaReload: Reuse badcaptcha rate limit]
+	- mediawiki <unfixed>
+	NOTE: http://phabricator.wikimedia.org/T355073
+	NOTE: https://gerrit.wikimedia.org/r/c/mediawiki/extensions/ConfirmEdit/+/1193206
 CVE-2025-61648
 	NOT-FOR-US: MediaWiki extension CheckUser
 CVE-2025-61658



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e60a1b293be11091a09f99e6956466992e87281

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e60a1b293be11091a09f99e6956466992e87281
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251002/ee9d6a31/attachment.htm>