CVE-2018-25246: Wikipedia

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Wikipedia 12.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting oversized input through the search functionality. Attackers can paste a large buffer of repeated characters into the search bar to trigger an application crash.

Affected products

• Wikipedia Wikipedia: version 12.0 only

Published 2026-04-04. Last modified 2026-07-21.