| Package | Affected versions | Patched versions |
|---|---|---|
| mediawiki | = 1.24.0= 1.24.1 |
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumption) via a long password.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free