CVE-2025-6597
Lifecycle Timeline
2Description
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects MediaWiki: from * before 1.39.13, 1.42.7, 1.43.2, 1.44.0.
Analysis
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/auth/AuthManager.Php.
Technical Context
Classified as CWE-22 (Path Traversal). Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/auth/AuthManager.Php.
This issue affects MediaWiki: from * before 1.39.13, 1.42.7, 1.43.2, 1.44.0.
Affected Products
Vulnerability in Wikimedia Foundation MediaWiki
Remediation
Monitor vendor advisories for a patch. Validate and sanitize file path inputs. Use allowlists.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today