MS
Product
Mediawiki - SocialProfile Extension
by Wikimedia Foundation · last CVE Jan 14, 2025
1
CVEs
0
On KEV
2.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 1
Watch

Add Mediawiki - SocialProfile Extension to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-23074
2.4
0%
Jan 14
Special:EditProfile exposes the contents of profile fields marked "hidden"/friends or "friends of friends" when the privileged user isn't a friend of the user whose profile they edit(ed)
Affected: 1.39.x before 1.39.11; 1.41.x before 1.41.3; 1.42.x before 1.42.2
Showing 1