~ / search / GHSA-c8wv-qwwc-6j73

GHSA-c8wv-qwwc-6j73

MediaWiki allows a denial of service

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-41800

Packages

EcosystemPackageAffectedFixed in
Packagist mediawiki/core < 1.36.2 1.36.2

Details

As written in the advisory (Markdown source, shown as plain text).

MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). Visiting Special:Contributions can sometimes result in a long running SQL query because PoolCounter protection is mishandled.

References

External links from the advisory. They lead to third-party sites.