Lucene search
Ubuntu.comUB:CVE-2024-34506HistoryMay 05, 2024 - 12:00 a.m.
CVE-2024-34506
2024-05-0500:00:00
ubuntu.com
ubuntu.com
5
mediawiki
special:movepage
denial of service
An issue was discovered in includes/specials/SpecialMovePage.php in
MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. If
a user with the necessary rights to move the page opens Special:MovePage
for a page with tens of thousands of subpages, then the page will exceed
the maximum request time, leading to a denial of service.
References
gerrit.wikimedia.org/r/c/mediawiki/core/+/1015423
launchpad.net/bugs/cve/CVE-2024-34506
lists.wikimedia.org/hyperkitty/list/[email protected]/thread/V3WXEPXV2DU6WTVEKK4XHW4QXD5OFKD7/
nvd.nist.gov/vuln/detail/CVE-2024-34506
phabricator.wikimedia.org/T357760
security-tracker.debian.org/tracker/CVE-2024-34506
www.cve.org/CVERecord?id=CVE-2024-34506
Related
vulnrichment
vulnrichment
CVE-2024-34506
2024-05-05 00:00:00
debiancve
debiancve
CVE-2024-34506
2024-05-05 19:15:07
redhatcve
redhatcve
CVE-2024-34506
2024-05-06 04:24:10
cvelist
cvelist
CVE-2024-34506
2024-05-05 00:00:00
nvd
nvd
CVE-2024-34506
2024-05-05 19:15:07
cve
cve
CVE-2024-34506
2024-05-05 19:15:07
openvas
openvas
Debian: Security Advisory (DSA-5651-1)
2024-04-01 00:00:00
veracode
veracode
Denial Of Service (DoS)
2024-05-14 08:10:39
redos
redos
ROS-20240514-01
2024-05-14 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: php-wikimedia-cdb-3.0.0-1.fc40
2024-05-11 01:32:03
[SECURITY] Fedora 40 Update: php-oojs-oojs-ui-0.48.1-1.fc40
2024-05-11 01:32:03
[SECURITY] Fedora 40 Update: mediawiki-1.41.1-1.fc40
2024-05-11 01:32:02
nessus
nessus