Skip to content
OpenAdvisories
High · 8.8 CVE-2025-53501 EUVD-2025-19886GHSA-87g7-v6qr-fprp

Content Access Bypass in Scribunto

Published Jul 3, 2025 · Updated Jul 10, 2025 · Assigned by wikimedia-foundation

Description

Improper Access Control vulnerability in Wikimedia Foundation Mediawiki - Scribunto Extension allows : Accessing Functionality Not Properly Constrained by Authorization.This issue affects Mediawiki - Scribunto Extension: from 1.39.X before 1.39.12, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.

Affected products

VendorProductAffectedFixed
Wikimedia Foundation Mediawiki - Scribunto Extension 1.39.x – < 1.39.13, 1.42.x – < 1.42.7, 1.43.x – < 1.43.2 1.39.13

Advisories 1

References