VULNERABILITY INTELLIGENCE
CVE-2025-11175
EPSS probability0.47%
CISA KEVNot currently listed
Published2026-01-30
Last modified2026-06-17
Description
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') vulnerability in The Wikimedia Foundation Mediawiki - DiscussionTools Extension allows Regular Expression Exponential Blowup.This issue affects Mediawiki - DiscussionTools Extension: 1.44, 1.43.
Weakness classification
- c4f26cc8-17ff-4c99-b5e2-38fc1793eacc: CWE-917