Lucene search

K
osvGoogleOSV:BIT-MEDIAWIKI-2022-28201
HistoryMar 06, 2024 - 11:07 a.m.

BIT-mediawiki-2022-28201

2024-03-0611:07:22
Google
osv.dev
3
mediawiki
vulnerability
infinite recursion
editinterface permission

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.0%

An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message.

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.0%