Medium severity · published Oct 21, 2025
CVE-2025-62696
Multiple critical security issues in Springboard
6.9
CVSS
1.4%
EPSS
No
On KEV
Description
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in The Wikimedia Foundation Mediawiki Foundation - Springboard Extension allows Command Injection.This issue affects Mediawiki Foundation - Springboard Extension: master.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MF
Mediawiki Foundation - Springboard Extension · The Wikimedia Foundation
master · source: vendor
Affected product
MF
Mediawiki Foundation - Springboard Extension
The Wikimedia Foundation