CVE-2025-32699: Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid.This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1; Parsoid: before…

PriorityP410low2.1CVSS 4.0

AVNACHATNPRNUIAVCNVILVANSCNSINSANEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREMUAmber

EPSS

0.36%

28.2th percentile

Vulnerability in Wikimedia Foundation MediaWiki, Wikimedia Foundation Parsoid.This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1; Parsoid: before 0.16.5, 0.19.2, 0.20.2.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
debian	mediawiki	< mediawiki 1:1.39.12-1~deb12u1 (bookworm)	mediawiki 1:1.39.12-1~deb12u1 (bookworm)
mediawiki	mediawiki	>= 0 < 1:1.35.13-1+deb11u4	1:1.35.13-1+deb11u4
mediawiki	mediawiki	>= 0 < 1:1.39.12-1~deb12u1	1:1.39.12-1~deb12u1
mediawiki	mediawiki	>= 0 < 1:1.43.1+dfsg-1	1:1.43.1+dfsg-1
mediawiki	mediawiki	>= 0 < 1:1.43.1+dfsg-1	1:1.43.1+dfsg-1
wikimedia_foundation	mediawiki	< 1.39.12, 1.42.6, 1.43.1	1.39.12, 1.42.6, 1.43.1
wikimedia_foundation	parsoid	< 0.16.5, 0.19.2, 0.20.2	0.16.5, 0.19.2, 0.20.2

CVSS provenance

nvdv4.02.1LOWCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:M/U:Amber

osv2.1LOW

vendor_debian2.1LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.