Description
An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. When a user with checkuserlog permissions makes many CheckUserLog API requests in some configurations, denial of service can occur (RequestTimeoutException or upstream request timeout).
Remediation
References
Related Vulnerabilities
Apache HTTP Server Other Vulnerability (CVE-2004-1834)
XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2022-36100)
Oracle Database Server CVE-2014-4237 Vulnerability (CVE-2014-4237)
MySQL CVE-2019-2922 Vulnerability (CVE-2019-2922)
WordPress Plugin Responsive Lightbox by dFactory Cross-Site Scripting (1.4.11)