An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. When a user with checkuserlog permissions makes many CheckUserLog API requests in some configurations, denial of service can occur (RequestTimeoutException or upstream request timeout).
References
Link | Resource |
---|---|
https://phabricator.wikimedia.org/T326293 | Patch |
Configurations
History
11 Apr 2023, 06:07
Type | Values Removed | Values Added |
---|---|---|
First Time |
Mediawiki
Mediawiki mediawiki |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
CWE | NVD-CWE-noinfo | |
CPE | cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:* | |
References | (MISC) https://phabricator.wikimedia.org/T326293 - Patch |
31 Mar 2023, 19:17
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-03-31 19:15
Updated : 2023-12-10 15:01
NVD link : CVE-2023-29139
Mitre link : CVE-2023-29139
CVE.ORG link : CVE-2023-29139
JSON object : View
Products Affected
mediawiki
- mediawiki
CWE