VULNERABILITY INTELLIGENCE
CVE-2025-12004
EPSS probability0.40%
CISA KEVNot currently listed
Published2025-10-21
Last modified2026-10-18
Description
Incorrect Permission Assignment for Critical Resource vulnerability in The Wikimedia Foundation Mediawiki - Lockdown Extension allows Privilege Abuse. Fixed in Mediawiki Core Action APIThis issue affects Mediawiki - Lockdown Extension: from master before 1.42.
Weakness classification
- c4f26cc8-17ff-4c99-b5e2-38fc1793eacc: CWE-732