Medium severity4.6NVD Advisory· Published Apr 22, 2025· Updated Jun 17, 2026
CVE-2025-32964
CVE-2025-32964
Description
ManageWiki is a MediaWiki extension allowing users to manage wikis. Prior to commit 00bebea, when enabling a conflicting extension, a restricted extension would be automatically disabled even if the user did not hold the ManageWiki-restricted right. This issue has been patched in commit 00bebea. A workaround involves ensuring that any extensions requiring specific permissions in $wgManageWikiExtensions also require the same permissions for managing any conflicting extensions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:miraheze:managewiki:*:*:*:*:*:mediawiki:*:*+ 2 more
- cpe:2.3:a:miraheze:managewiki:*:*:*:*:*:mediawiki:*:*range: <2025-04-21
- (no CPE)range: <commit 00bebea
- (no CPE)range: < 00bebea
- Range: <commit 00bebea
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.