{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-29T14:29:20.034","vulnerabilities":[{"cve":{"id":"CVE-2025-53485","sourceIdentifier":"c4f26cc8-17ff-4c99-b5e2-38fc1793eacc","published":"2025-07-04T18:15:23.497","lastModified":"2026-06-17T09:38:17.880","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SetTranslationHandler.php does not validate that the user is an election admin, allowing any (even unauthenticated) user to change election-related translation text. While partially broken in newer MediaWiki versions, the check is still missing.\n\n\n\n\nThis issue affects Mediawiki - SecurePoll extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2."},{"lang":"es","value":"SetTranslationHandler.php no valida que el usuario sea administrador electoral, lo que permite que cualquier usuario (incluso sin autenticar) modifique el texto de traducción relacionado con las elecciones. Aunque funciona parcialmente mal en las versiones más recientes de MediaWiki, la comprobación sigue sin funcionar. Este problema afecta a Mediawiki - extensión SecurePoll: de la versión 1.39.X a la 1.39.13, de la versión 1.42.X a la 1.42.7 y de la versión 1.43.X a la 1.43.2."}],"affected":[{"source":"c4f26cc8-17ff-4c99-b5e2-38fc1793eacc","affectedData":[{"vendor":"Wikimedia Foundation","product":"Mediawiki - SecurePoll extension","defaultStatus":"unaffected","versions":[{"version":"1.39.x","lessThan":"1.39.13","versionType":"semver","status":"affected"},{"version":"1.42.x","lessThan":"1.42.7","versionType":"semver","status":"affected"},{"version":"1.43.x","lessThan":"1.43.2","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-07T19:44:55.869471Z","id":"CVE-2025-53485","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"c4f26cc8-17ff-4c99-b5e2-38fc1793eacc","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"references":[{"url":"https://gerrit.wikimedia.org/r/149668","source":"c4f26cc8-17ff-4c99-b5e2-38fc1793eacc"},{"url":"https://phabricator.wikimedia.org/T392341","source":"c4f26cc8-17ff-4c99-b5e2-38fc1793eacc"}]}}]}