Back to Database
Status published
Low
CVE-2025-32698
LogPager.php: Restriction enforcer functions do not correctly enforce suppression restrictions
Vulnerability Description
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/LogPager.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-32698
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- A_smart_kitten
- Bartosz Dziewoński
References
More from Wikimedia Foundation
View All →CVE-2025-7363
TitleIcon: Stored Cross-Site Scripting (XSS) via #titleicon_unicode parser function
Unknown
0
CVE-2025-7362
MsUpload: Stored Cross-Site Scripting (XSS) via unsanitized msu-continue system message
Unknown
0
CVE-2025-7057
Stored XSS in Quiz
Unknown
0
CVE-2025-7056
Stored XSS in UrlShortener
Unknown
0
CVE-2025-6927
Autoblocks from global account suppressions are publicly visible
Low
2.3
Affected Vendor
Wikimedia Foundation
View all reports →Affected Software
MediaWiki
Vulnerable Versions:
0
Timeline
Official Publish:
April 10th, 2025
Last Modified:
November 3rd, 2025
Added to House:
July 22nd, 2026