An issue was discovered in ApiPageSet.php in MediaWiki...
High severity
Unreviewed
Published
Oct 9, 2023
to the GitHub Advisory Database
•
Updated Nov 28, 2023
Description
Published by the National Vulnerability Database
Oct 9, 2023
Published to the GitHub Advisory Database
Oct 9, 2023
Last updated
Nov 28, 2023
An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It allows attackers to cause a denial of service (unbounded loop and RequestTimeoutException) when querying pages redirected to other variants with redirects and converttitles set.
References