Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-45367
HistoryOct 09, 2023 - 5:15 a.m.

Design/Logic Flaw

2023-10-0905:15:00
PRIOn knowledge base
www.prio-n.com
6
mediawiki
checkuser extension
denial of service

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.5%

An issue was discovered in the CheckUser extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. A user can use a rest.php/checkuser/v0/useragent-clienthints/revision/ URL to store an arbitrary number of rows in cu_useragent_clienthints, leading to a denial of service.

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.5%

Related for PRION:CVE-2023-45367