CVE-2025-61635
Linux Debian vulnerability analysis and mitigation

Overview

The vulnerability CVE-2025-61635 affects MediaWiki and is described as 'ApiFancyCaptchaReload: Reuse badcaptcha rate limit'. The issue was first identified and published on October 7, 2025 (Ubuntu CVE). The vulnerability affects multiple versions of MediaWiki across various distributions including Ubuntu and Debian systems (Debian Tracker).

Technical details

The vulnerability is related to the rate limiting mechanism in the ApiFancyCaptchaReload functionality of MediaWiki. Based on the available information, this is a security issue that affects the CAPTCHA system implementation. The vulnerability has been assigned a medium priority by Ubuntu, suggesting moderate severity (Ubuntu CVE).

Impact

While specific impact details are not fully disclosed in the available sources, the vulnerability potentially affects the CAPTCHA system's rate limiting functionality, which could impact the security of MediaWiki installations. The issue affects multiple supported versions of MediaWiki across different Linux distributions (Debian Tracker).

Mitigation and workarounds

The vulnerability status is currently marked as 'needs evaluation' across multiple Ubuntu releases including 25.10 (questing), 25.04 (plucky), 24.04 LTS (noble), 22.04 LTS (jammy), 20.04 LTS (focal), and 18.04 LTS (bionic) (Ubuntu CVE). No official fixes have been released yet, and the vulnerability remains under investigation.

Additional resources


SourceThis report was generated using AI

Related Linux Debian vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-11266MEDIUM6.8
  • Linux DebianLinux Debian
  • gdcm
NoNoDec 12, 2025
CVE-2025-67897MEDIUM5.3
  • Linux DebianLinux Debian
  • rust-sequoia-openpgp
NoYesDec 14, 2025
CVE-2025-14607MEDIUM5.3
  • Linux DebianLinux Debian
  • dcmtk
NoNoDec 13, 2025
CVE-2025-67749MEDIUM5.3
  • Linux DebianLinux Debian
  • pcsx2
NoNoDec 12, 2025
CVE-2025-40345N/AN/A
  • Linux KernelLinux Kernel
  • bpftool
NoYesDec 12, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management