跳转到帖子

MediaWiki: Unspecified Security Vulnerability (CVE-2023-22909)

recommended_posts

发布于
  • Members

MediaWiki: Unspecified Security Vulnerability (CVE-2023-22909)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
01/10/2023
Created
01/17/2023
Added
01/16/2023
Modified
01/28/2025

Description

An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. SpecialMobileHistory allows remote attackers to cause a denial of service because database queries are slow.

Solution(s)

  • mediawiki-upgrade-1_35_9
  • mediawiki-upgrade-1_38_5

References

  • https://attackerkb.com/topics/cve-2023-22909
  • CVE - 2023-22909
  • https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AP65YEN762IBNQPOYGUVLTQIDLM5XD2A/
  • https://phabricator.wikimedia.org/T320987
  • 查看数 696
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…