Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2024-34506

HistoryMay 05, 2024 - 7:15 p.m.

CVE-2024-34506

2024-05-0519:15:07

Debian Security Bug Tracker

security-tracker.debian.org

mediawiki

specialmovepage

denial of service

cve-2024-34506

subpages

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

An issue was discovered in includes/specials/SpecialMovePage.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. If a user with the necessary rights to move the page opens Special:MovePage for a page with tens of thousands of subpages, then the page will exceed the maximum request time, leading to a denial of service.

OSVersionArchitecturePackageVersionFilename
Debian12allmediawiki< 1:1.39.7-1~deb12u1mediawiki_1:1.39.7-1~deb12u1_all.deb
Debian11allmediawiki< 1:1.35.13-1+deb11u2mediawiki_1:1.35.13-1+deb11u2_all.deb
Debian10allmediawiki< 1:1.31.16-1+deb10u8mediawiki_1:1.31.16-1+deb10u8_all.deb
Debian999allmediawiki< 1:1.39.7-1mediawiki_1:1.39.7-1_all.deb
Debian13allmediawiki< 1:1.39.7-1mediawiki_1:1.39.7-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	mediawiki	< 1:1.39.7-1~deb12u1	mediawiki_1:1.39.7-1~deb12u1_all.deb
Debian	11	all	mediawiki	< 1:1.35.13-1+deb11u2	mediawiki_1:1.35.13-1+deb11u2_all.deb
Debian	10	all	mediawiki	< 1:1.31.16-1+deb10u8	mediawiki_1:1.31.16-1+deb10u8_all.deb
Debian	999	all	mediawiki	< 1:1.39.7-1	mediawiki_1:1.39.7-1_all.deb
Debian	13	all	mediawiki	< 1:1.39.7-1	mediawiki_1:1.39.7-1_all.deb