Skip to content
OpenAdvisories
Medium · 6.9 CVE-2025-62666 EUVD-2025-34969GHSA-w49h-rmgr-rwp7

DoS vector through the cirrusbuilddoc query API

Published Oct 18, 2025 · Updated Oct 20, 2025 · Assigned by wikimedia-foundation

Description

Allocation of Resources Without Limits or Throttling vulnerability in The Wikimedia Foundation Mediawiki - CirrusSearch Extension allows HTTP DoS.This issue affects Mediawiki - CirrusSearch Extension: from master before 1.43.

Affected products

VendorProductAffectedFixed
The Wikimedia Foundation Mediawiki - CirrusSearch Extension master – < 1.43 1.43

Advisories 1

References