CVE-2025-62668

MediumCVSS 6.9

Published: 18/10/2025(UTC)Updated: 09/10/2026(UTC)Translated: 09/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

34th percentile - higher than 34% of all known CVEs

Summary

The GrowthExperiments extension for MediaWiki has an incorrect default permissions vulnerability, leading to resource leak exposure. This affects versions from master before 1.39.

Risk Assessment

An unauthorized attacker may gain access to confidential information, potentially compromising data security and user privacy.

Recommendation

Update the GrowthExperiments extension to version 1.39 or later to eliminate the vulnerability.

Other vulnerabilities in MediaWiki GrowthExperiments Extension

CVE-2025-62667Medium
The GrowthExperiments extension for MediaWiki is vulnerable to Stored XSS due to improper input neutralization during web page generation. This affects versions from master before 1.39.

Original NVD description (English source)

Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Resource Leak Exposure.This issue affects Mediawiki - GrowthExperiments Extension: from master before 1.39.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS