Lucene search

GoogleOSV:CVE-2023-37303

HistoryJun 30, 2023 - 5:15 p.m.

CVE-2023-37303

2023-06-3017:15:09

Google

osv.dev

checkuser

mediawiki

security issue

error message

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.3%

JSON

An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In certain situations, an attempt to block a user fails after a temporary browser hang and a DBQueryDisconnectedError error message.

CPENameOperatorVersion
mediawikieq1.39.0
mediawikieq1.39.2
mediawikieq1.5.0beta2
mediawikieq1.39.0-rc.1
mediawikieq1.5.0beta4
mediawikieq1.5.0alpha1
mediawikieq1.39.3
mediawikieq1.5.0beta3
mediawikieq1.39.1
mediawikieq1.6.0

Name	Operator	Version
mediawiki	eq	1.39.0
mediawiki	eq	1.39.2
mediawiki	eq	1.5.0beta2
mediawiki	eq	1.39.0-rc.1
mediawiki	eq	1.5.0beta4
mediawiki	eq	1.5.0alpha1
mediawiki	eq	1.39.3
mediawiki	eq	1.5.0beta3
mediawiki	eq	1.39.1
mediawiki	eq	1.6.0

Rows per page:

1-10 of 151

References

gerrit.wikimedia.org/r/q/I10a9273c542576b3f7bb38de68dcd2aa41cfb1b0

phabricator.wikimedia.org/T338276

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.3%

JSON

Related for OSV:CVE-2023-37303