CVE-2025-12004

Incorrect Permission Assignment for Critical Resource vulnerability in The Wikimedia Foundation Mediawiki – Lockdown Extension allows Privilege Abuse. Fixed in Mediawiki Core Action APIThis issue affects Mediawiki – Lockdown Extension: from master before 1.42.

More information : https://gerrit.wikimedia.org/r/q/Id275382743957004fa7fc56318fc104d8e2d267b