Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-52vr-v6fr-rfg8

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalRenameRequest page is vulnerable to infinite loops and denial of service attacks when a user's current username is beyond an arbitrary maximum configuration value (MaxNameChars).

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalRenameRequest page is vulnerable to infinite loops and denial of service attacks when a user's current username is beyond an arbitrary maximum configuration value (MaxNameChars).

EPSS

Процентиль: 51%
0.00275
Низкий

Дефекты

CWE-835

Связанные уязвимости

CVSS3: 7.5
nvd
больше 4 лет назад

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalRenameRequest page is vulnerable to infinite loops and denial of service attacks when a user's current username is beyond an arbitrary maximum configuration value (MaxNameChars).

EPSS

Процентиль: 51%
0.00275
Низкий

Дефекты

CWE-835