En bref
- CVE-2023-45363 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant mediawiki/core, mediawiki (mediawiki).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 23.8%, plus élevée que 97.8% des vulnérabilités.
- Correctif : mettre à jour vers 1.39.5, 1.40.1, 1.35.12 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| mediawiki/core Packagist | ≥ 1.36.0, < 1.39.5≥ 1.40.0, < 1.40.1< 1.35.12
| 1.39.51.40.11.35.12
|
| mediawiki | = 1.40.0≥ 1.36.0, < 1.39.5< 1.35.12
| 1.39.51.35.12
|
Description
An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It allows attackers to cause a denial of service (unbounded loop and RequestTimeoutException) when querying pages redirected to other variants with redirects and converttitles set.
NVD description
An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It allows attackers to cause a denial of service (unbounded loop and RequestTimeoutException) when querying pages redirected to other variants with redirects and converttitles set.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free