CVE-2023-45363

Katalog CVE

CVSS 7.5 · High EPSS 23,8%

Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada mediawiki, debian linux. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It allows attackers to cause a denial of service (unbounded loop and RequestTimeoutException) when querying pages redirected to other variants with redirects and converttitles set.

Rincian

Terbit di NVD

9 Oktober 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

EPSS (30 hari)

23,8% peluang dieksploitasi; lebih tinggi dari 97,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://phabricator.wikimedia.org/T333050 exploit · advisory pihak ketiga · advisory vendor
• https://www.debian.org/security/2023/dsa-5520 advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/11/msg00027.html