Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2021-41800

Опубликовано: 30 сент. 2021
Источник: redhat
CVSS3: 5.3

Описание

MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visiting Special:Contributions can sometimes result in a long running SQL query because PoolCounter protection is mishandled.

A flaw was found in MediaWiki, where Visiting Special:Contributions may result in a long query due to mishandled PoolCounter protection. This issue may cause resource exhaustion, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Отчет

OpenShift Container Platform (OCP) 3.11 is in maintenance support for low and moderate impact vulnerabilities, hence the OCP 3.11 mediawiki component has been marked as out of support scope.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat OpenShift Container Platform 3.11mediawikiOut of support scope

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-400
https://bugzilla.redhat.com/show_bug.cgi?id=2009517mediawiki: mishandled PoolCounter's protection may result DoS when visiting Special:Contributions.

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 4 лет назад

MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visiting Special:Contributions can sometimes result in a long running SQL query because PoolCounter protection is mishandled.

CVSS3: 5.3
nvd
больше 4 лет назад

MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visiting Special:Contributions can sometimes result in a long running SQL query because PoolCounter protection is mishandled.

CVSS3: 5.3
debian
больше 4 лет назад

MediaWiki before 1.36.2 allows a denial of service (resource consumpti ...

CVSS3: 5.3
github
больше 3 лет назад

MediaWiki allows a denial of service

5.3 Medium

CVSS3