MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). ApiQueryBacklinks (action=query&list=backlinks) can cause a full table scan.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade mediawiki | Nov 29, 2021 | Oct 11, 2021 |
| Freebsd | — | Upgrade mediawiki135Upgrade mediawiki131Upgrade mediawiki136 | Nov 4, 2022 | Oct 1, 2021 |
| Gentoo Linux | — | Upgrade www-apps/mediawiki. | May 23, 2023 | Oct 11, 2021 |
| Mediawiki | — | Upgrade MediaWiki to the latest version | Nov 26, 2021 | Oct 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub