Lucene search

K
redosRedosROS-20240514-01
HistoryMay 14, 2024 - 12:00 a.m.

ROS-20240514-01

2024-05-1400:00:00
redos.red-soft.ru
4
mediawiki
special:movepage
commentparser.php
xss
denial of service
unix

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

The vulnerability of the file includes/specials/SpecialMovePage.php of the software tool for implementing the
MediaWiki hypertext environment is related to incorrect resource clearing or freeing. Exploitation
The vulnerability could allow an attacker acting remotely to cause a denial of service using the
page parameter Special:MovePage

Vulnerability in the file includes/CommentFormatter/CommentParser.php of the software tool for implementing the
MediaWiki hypertext environment is related to incorrect input neutralization during the creation of a web page.
web page. Exploitation of the vulnerability could allow an attacker acting remotely to perform a
cross-site scripting (XSS) attacks

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64mediawiki<= 1.40.3-3UNKNOWN

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%