Question 1

What is CVE-2025-12004 — CVE-2025-12004?

Accepted Answer

Incorrect Permission Assignment for Critical Resource vulnerability in The Wikimedia Foundation Mediawiki - Lockdown Extension allows Privilege Abuse. Fixed in Mediawiki Core Action APIThis issue affects Mediawiki - Lockdown Extension: from master before 1.42.

Question 2

What is the authoritative source for CVE-2025-12004?

Accepted Answer

CVE-2025-12004 (CVE-2025-12004) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2025-12004CVE-2025-12004

Description

Scoring