Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2021-41799

Опубликовано: 30 сент. 2021
Источник: redhat
CVSS3: 6.5
EPSS Низкий

Описание

MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). ApiQueryBacklinks (action=query&list=backlinks) can cause a full table scan.

When processing ApiQueryBacklinks, the full db table scan might be initiated what can cause resource exhaustion and in a consequence the denial of service (DoS).

Отчет

OpenShift Container Platform (OCP) 3.11 is in maintenance support for low and moderate impact vulnerabilities, hence the OCP 3.11 mediawiki component has been marked as out of support scope.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat OpenShift Container Platform 3.11mediawikiOut of support scope

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-400
https://bugzilla.redhat.com/show_bug.cgi?id=2009511mediawiki: ApiQueryBacklinks can cause a full table scan and as a result DoS

EPSS

Процентиль: 50%
0.00268
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 4 лет назад

MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). ApiQueryBacklinks (action=query&list=backlinks) can cause a full table scan.

CVSS3: 7.5
nvd
больше 4 лет назад

MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). ApiQueryBacklinks (action=query&list=backlinks) can cause a full table scan.

CVSS3: 7.5
debian
больше 4 лет назад

MediaWiki before 1.36.2 allows a denial of service (resource consumpti ...

CVSS3: 7.5
github
больше 3 лет назад

MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). ApiQueryBacklinks (action=query&list=backlinks) can cause a full table scan.

EPSS

Процентиль: 50%
0.00268
Низкий

6.5 Medium

CVSS3