Description

A denial-of-service issue was discovered in MediaWiki 1.37.x before 1.37.2. Rendering of w/index.php?title=Special%3AWhatLinksHere&target=Property%3AP31&namespace=1&invert=1 can take more than thirty seconds. There is a DDoS risk.

Remediation

References

CVE-2022-28204

Related Vulnerabilities

MediaWiki CVE-2019-12467 Vulnerability (CVE-2019-12467)

WordPress Plugin VDZ Google Analytics or Google Tag Manager/GTM Cross-Site Scripting (1.5.5)

WordPress Plugin AliExpress Dropshipping with AliNext Lite Cross-Site Request Forgery (3.3.5)

JQuery UI Cross-site Scripting (XSS) Vulnerability (CVE-2016-7103)

WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.10)

Severity

High

Classification

CVE-2022-28204 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities