CVE-2025-23073: Wikimedia Foundation Mediawiki - Globalblocking Extension

Low severity, CVSS 3.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data. This issue briefly impacted the master branch of MediaWiki’s GlobalBlocking Extension.

Affected products

• Wikimedia Foundation Mediawiki - Globalblocking Extension

Published 2025-01-14. Last modified 2026-06-17.