Description

MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumption) via a long password.

Remediation

References

CVE-2015-2936

Related Vulnerabilities

Moodle 7PK - Security Features Vulnerability (CVE-2015-5267)

Magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-8130)

WordPress Plugin Car Demon Multiple Cross-Site Scripting Vulnerabilities (1.0.1)

WordPress Plugin Mongoose Page Cross-Site Scripting (1.8.3)

Drupal Core 8.7.x Security Bypass (8.7.0 - 8.7.10)

Severity

High

Classification

CVE-2015-2936

Tags

Missing Update Known Vulnerabilities