Insertion of Sensitive Information Into Sent Data

Overview mediawiki/core is a Free software wiki application developed by the Wikimedia Foundation and others. Note: This package is not maintained on Packagist anymore, but newer releases exist. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data...

CVE-2025-61643

CVE-2025-61643 affects Wikimedia Foundation MediaWiki before versions 1.39.14, 1.43.4, and 1.44.1, with the issue tied to program files includes/recentchanges/RecentChangeRCFeedNotifier.Php. Debian advisories list broader issues in MediaWiki and provide fixes: bookworm in 1.39.17-1~deb12u1 and tr...