CVE-2025-61647 – UserInfoCard: Don’t allow access to information about users who are suppressed if you don’t have suppressor rights

CVE ID : CVE-2025-61647

Published : Feb. 3, 2026, 12:16 a.m. | 1 hour ago

Description : Vulnerability in Wikimedia Foundation CheckUser. This vulnerability is associated with program files src/Api/Rest/Handler/UserInfoHandler.Php.

This issue affects CheckUser: from a3dc1bbcc33acbcca6831d6afaccbb1054c93a57, 0584eb2ad564648aa3ce9c555dd044dda02b55f4.

Severity: 0.3 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…