CVE-2025-67480 list=allrevisions can be used to bypass Extension:Lockdown

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Api/ApiQueryRevisionsBase.Php. This issue affects MediaWiki: from before 1.39.16, 1.43.6, 1.44.3, 1.45.1...

CVE-2025-67480

CVE-2025-67480 affects Wikimedia Foundation MediaWiki. The issue is in ApiQueryRevisionsBase.php and, per Debian, affects MediaWiki versions before 1.39.16, 1.43.6, 1.44.3, 1.45.1, with read-permission checks for the target page not performed properly, potentially enabling information disclosure....

CVE-2025-12004

CVE-2025-12004 affects MediaWiki with the Lockdown Extension (vulnerable: Lockdown Extension before 1.42). The issue is an incorrect permission assignment for a critical resource, enabling privilege abuse. The vulnerability is fixed in MediaWiki Core Action API (upgrade to a version including the...