
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2025-61655 is a security vulnerability in MediaWiki related to system message handling. The vulnerability affects multiple versions of MediaWiki, including versions 1.35.13, 1.39.13, and 1.43.3. The issue is described as a failure to properly escape and parse system messages (Debian Tracker).
The vulnerability exists in the system message parsing functionality of MediaWiki. It affects multiple releases including bullseye (1:1.35.13-1+deb11u4), bookworm (1:1.39.13-1~deb12u1), and forky/sid/trixie (1:1.43.3+dfsg-1) versions (Debian Tracker).
The vulnerability is currently assessed with a medium priority rating by Ubuntu security team (Ubuntu Security). The issue affects multiple supported versions of MediaWiki across different distributions.
Currently, the vulnerability remains unpatched across multiple versions. The issue is marked as 'vulnerable' in various MediaWiki releases, including the latest versions in Debian distributions (Debian Tracker).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."