Skip to content
OpenAdvisories
Medium · 6.9 CVE-2025-62668 EUVD-2025-34956GHSA-v6f7-mh9q-h69v

Insufficient permission checks in action=growthsetmentor

Published Oct 18, 2025 · Updated Oct 20, 2025 · Assigned by wikimedia-foundation

Description

Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Resource Leak Exposure.This issue affects Mediawiki - GrowthExperiments Extension: from master before 1.39.

Affected products

VendorProductAffectedFixed
The Wikimedia Foundation Mediawiki - GrowthExperiments Extension master – < 1.39 1.39

Advisories 1

References