CVE-2024-34506 – An issue was discovered in includes/specials/SpecialMovePage.php in MediaWiki before …

Vuln ID: CVE-2024-34506

Published:  2024-05-05  19:15:07.253

Description: An issue was discovered in includes/specials/SpecialMovePage.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. If a user with the necessary rights to move the page opens Special:MovePage for a page with tens of thousands of subpages, then the page will exceed the maximum request time, leading to a denial of service.

Base Score:

Vector:

Source: NVD.NIST.GOV

 


Date:

Categorie(s):

Tag(s):