Description

Bucket is a MediaWiki extension to store and retrieve structured data on articles. Prior to version 1.0.0, infinite recursion can occur if a user queries a bucket using the `!=` comparator. This will result in PHP's call stack limit exceeding, and/or increased memory consumption, potentially leading to a denial of service. Version 1.0.0 contains a patch for the issue.

INFO

Published Date :

2025-10-06T16:07:04.126Z

Last Modified :

2025-10-06T17:16:30.112Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2025-61766 vulnerability.

Vendors Products
Mediawiki
  • Mediawiki
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-61766.

URL Resource
https://github.com/weirdgloop/mediawiki-extensions-Bucket/blob/ad704120a1660b5929fb5825db1cf85c9c77acf4/includes/Expression/MemberOfExpression.php#L34 cve-icon cve-icon
https://github.com/weirdgloop/mediawiki-extensions-Bucket/commit/6f4a71d531cb802cdb991d2a4ca7bf8fb691defd cve-icon cve-icon
https://github.com/weirdgloop/mediawiki-extensions-Bucket/security/advisories/GHSA-r9f2-4jh3-659j cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact