CVE-2025-6591
CVE-2025-6591 · HTML injection in API action=feedcontributions output from i18n message
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/api/ApiFeedContributions.Php. This issue affects MediaWiki: from * before 1.39.13, 1.42.7 1.43.2, 1.44.0.
CVSS 0.0 · Low · EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
mediawiki
- Versions
- ≥ *, < 1.39.13, 1.42.7 1.43.2, 1.44.0: Affected (semver)
Update to 1.39.13, 1.42.7 1.43.2, 1.44.0
mediawiki Debian:12
- Versions
- 1:1.39.10-1
- 1:1.39.10-1~deb12u1
- 1:1.39.12-1~deb12u1
- 1:1.39.2-1
- 1:1.39.4-1
- 1:1.39.4-1~deb12u1
- 1:1.39.4-2
- 1:1.39.5-1
- 1:1.39.5-1~deb12u1
- 1:1.39.6-1
- 1:1.39.7-1
- 1:1.39.7-1~deb12u1
- 1:1.39.8-1
- Affected ranges
- ECOSYSTEM: < 1:1.39.13-1~deb12u1
Update to 1:1.39.13-1~deb12u1
mediawiki Debian:13
- Affected ranges
- ECOSYSTEM: < 1:1.43.3+dfsg-1
Update to 1:1.43.3+dfsg-1
mediawiki Debian:14
- Affected ranges
- ECOSYSTEM: < 1:1.43.3+dfsg-1
Update to 1:1.43.3+dfsg-1
mediawiki Ubuntu:18.04:LTS
- Versions
- 1:1.27.3-1
- 1:1.27.4-1
- 1:1.27.4-2
- 1:1.27.4-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
mediawiki Ubuntu:Pro:20.04:LTS
- Versions
- 1:1.31.2-1ubuntu1
- 1:1.31.5-1
- 1:1.31.5-1ubuntu1
- 1:1.31.5-2
- 1:1.31.5-3
- 1:1.31.5-3ubuntu1
- 1:1.31.6-1
- 1:1.31.7-1
- 1:1.31.7-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
mediawiki Ubuntu:Pro:22.04:LTS
- Versions
- 1:1.35.3-1
- 1:1.35.4-1
- 1:1.35.5-1
- 1:1.35.5-1ubuntu1
- 1:1.35.5-1ubuntu2
- 1:1.35.5-1ubuntu3
- 1:1.35.6-1
- 1:1.35.6-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
mediawiki Ubuntu:Pro:24.04:LTS
- Versions
- 1:1.39.4-2
- 1:1.39.5-1
- 1:1.39.6-1
- 1:1.39.7-1
- 1:1.39.7-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
mediawiki Ubuntu:25.10
- Versions
- 1:1.43.1+dfsg-1
- 1:1.43.1+dfsg-2
- 1:1.43.3+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
mediawiki Ubuntu:26.10
- Versions
- 1:1.43.8+dfsg-2
- 1:1.43.9+dfsg-1
- 1:1.43.9+dfsg-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
mediawiki Ubuntu:26.04:LTS
- Versions
- 1:1.43.3+dfsg-1
- 1:1.43.5+dfsg-1
- 1:1.43.6+dfsg-2
- 1:1.43.8+dfsg-1
- 1:1.43.8+dfsg-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published