Vulnerability CVE-2022-28204: Information

Description

A denial-of-service issue was discovered in MediaWiki 1.37.x before 1.37.2. Rendering of w/index.php?title=Special%3AWhatLinksHere&target=Property%3AP31&namespace=1&invert=1 can take more than thirty seconds. There is a DDoS risk.

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2022-28204
Published: Sept. 20, 2022
Modified: Sept. 21, 2022

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
mediawikisisyphus1.37.2-alt11.40.1-alt2ALT-PU-2022-2140-1302595Fixed
mediawikisisyphus_e2k1.37.2-alt11.40.1-alt2ALT-PU-2022-5468-1-Fixed
mediawikip101.37.2-alt11.40.1-alt2ALT-PU-2022-2428-1305046Fixed
mediawikip10_e2k1.37.2-alt11.40.1-alt2ALT-PU-2022-5749-1-Fixed
mediawikic10f11.37.2-alt11.37.2-alt1ALT-PU-2022-2428-1305046Fixed
mediawikip111.37.2-alt11.40.1-alt2ALT-PU-2022-2140-1302595Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://phabricator.wikimedia.org/T297754
  • Exploit
  • Issue Tracking
  • Patch
  • Vendor Advisory

    1. Configuration 1

      cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*
      Start including
      1.37.0
      End excliding
      1.37.2
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.3
Back to top