Lucene search

K
osvGoogleOSV:GHSA-C8WV-QWWC-6J73
HistoryMay 24, 2022 - 7:17 p.m.

MediaWiki allows a denial of service

2022-05-2419:17:14
Google
osv.dev
12
mediawiki
denial of service
1.36.2
resource consumption
lengthy query processing
special:contributions
sql query
poolcounter protection
vulnerability

AI Score

7.2

Confidence

Low

EPSS

0.003

Percentile

66.3%

MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visiting Special:Contributions can sometimes result in a long running SQL query because PoolCounter protection is mishandled.