Wikimedia · Mediawiki · CVE-2019-12473
**Name of the Vulnerable Software and Affected Versions**
MediaWiki versions 1.27.0 through 1.32.1
**Description**
The issue is related to the transmission of invalid headers in the API, which can lead to a denial of service. An attacker could exploit this by passing invalid titles to the API, causing it to query the entire watchlist table. This could allow a remote attacker to cause a denial of service.
**Recommendations**
For versions 1.27.0 through 1.27.5, update to version 1.27.6.
For versions 1.30.0 through 1.30.1, update to version 1.30.2.
For versions 1.31.0 through 1.31.1, update to version 1.31.2.
For versions 1.32.0 through 1.32.1, update to version 1.32.2.