Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MediaWiki Allocation of Resources Without Limits or Throttling Vulnerability - CVE-2022-34750 - Vulnerability Database
MediaWiki

MediaWiki Allocation of Resources Without Limits or Throttling Vulnerability - CVE-2022-34750

High
Reference: CVE-2022-34750
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-34750
Title: MediaWiki Allocation of Resources Without Limits or Throttling Vulnerability
Overview:

An issue was discovered in MediaWiki through 1.38.1. The lemma length of a Wikibase lexeme is currently capped at a thousand characters. Unfortunately this length is not validated allowing much larger lexemes to be created which introduces various denial-of-service attack vectors within the Wikibase and WikibaseLexeme extensions. This is related to Special:NewLexeme and Special:NewProperty.