CVE-2025-62655

Vulnerability Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation MediaWiki Cargo extension allows SQL Injection.This issue affects MediaWiki Cargo extension: 1.39, 1.43, 1.44.

Related Weaknesses (CWE)

CWE-89

References

https://phabricator.wikimedia.org/T404016
https://phabricator.wikimedia.org/T404016

FAQ

What is CVE-2025-62655?

CVE-2025-62655 is a documented vulnerability. Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in The Wikimedia Foundation MediaWiki Cargo extension allows SQL Injection.This issue affects MediaWi...

How severe is CVE-2025-62655?

CVSS scoring is not yet available for CVE-2025-62655. Check NVD for updates.

Is there a patch for CVE-2025-62655?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.