Skip to content
OpenAdvisories
Low · 0.3 CVE-2025-61647 EUVD-2025-206645GHSA-j8mp-qmj4-gphg

UserInfoCard: Don't allow access to information about users who are suppressed if you don't have suppressor rights

Published Feb 3, 2026 · Updated Mar 3, 2026 · Assigned by wikimedia-foundation

Description

Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Api/Rest/Handler/UserInfoHandler.Php.

This issue affects CheckUser: from a3dc1bbcc33acbcca6831d6afaccbb1054c93a57, 0584eb2ad564648aa3ce9c555dd044dda02b55f4.

Affected products

VendorProductAffectedFixed
Wikimedia Foundation CheckUser a3dc1bbcc33acbcca6831d6afaccbb1054c93a57, 0584eb2ad564648aa3ce9c555dd044dda02b55f4 —

References