Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Wikimedia Foundation
Mediawiki - Socialprofile Extension
Wikimedia Foundation Mediawiki - Socialprofile Extension vulnerabilities
Any severity
Critical
High or worse
Medium or worse
Low or worse
Any EPSS
EPSS 10% or more
EPSS 50% or more
EPSS 90% or more
Known exploited
In KEV
Public exploit
Fix available
Apply
wikimedia foundation
mediawiki - socialprofile extension
Special:EditProfile exposes the contents of profile fields marked "hidden"/friends or "friends of friends" when the privileged user isn't a friend of the user whose profile they edit(ed)
CVE-2025-23074
2.4
Low
January 14, 2025
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open