Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-45367

An issue was discovered in the CheckUser extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. A user can use a rest.php/checkuser/v0/useragent-clienthints/revision/ URL to store an arbitrary number of rows in cu_useragent_clienthints, leading to a denial of service.

Published

2023-10-09T05:15:09.357

Last Modified

2024-11-21T08:26:49.807

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mediawiki mediawiki < 1.35.12 Yes
Application mediawiki mediawiki < 1.39.5 Yes
Application mediawiki mediawiki 1.40.0 Yes
References