CVE-2025-67478
Unknown
Unknown - Not Provided
Information Disclosure Vulnerability in Wikimedia CheckUser UserMailer.php
Publication date: 2026-02-03
Last updated on: 2026-04-14
Assigner: wikimedia-foundation
Description
Description
Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files includes/Mail/UserMailer.Php.
This issue affects CheckUser: from * before 1.39.14, 1.43.4, 1.44.1.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| mediawiki | checkuser | From 1.39.0 (inc) to 1.39.14 (exc) |
| mediawiki | checkuser | From 1.43.0 (inc) to 1.43.4 (exc) |
| mediawiki | checkuser | 1.44.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |