Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-52vr-v6fr-rfg8

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalRenameRequest page is vulnerable to infinite loops and denial of service attacks when a user's current username is beyond an arbitrary maximum configuration value (MaxNameChars).

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalRenameRequest page is vulnerable to infinite loops and denial of service attacks when a user's current username is beyond an arbitrary maximum configuration value (MaxNameChars).

EPSS

Процентиль: 63%
0.01039
Низкий

Дефекты

CWE-835

Связанные уязвимости

CVSS3: 7.5
nvd
около 5 лет назад

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalRenameRequest page is vulnerable to infinite loops and denial of service attacks when a user's current username is beyond an arbitrary maximum configuration value (MaxNameChars).

CVSS3: 9.8
altlinux
больше 5 лет назад

ALT-PU-2021-1991: package `mediawiki` update to version 1.36.0-alt1

EPSS

Процентиль: 63%
0.01039
Низкий

Дефекты

CWE-835