Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Jcrespo

#36795of 53,630
7.5Total CVSS
Vulnerabilities · 1
PT-2019-3451
7.5
2019-06-07
Wikimedia · Mediawiki · CVE-2019-12473
**Name of the Vulnerable Software and Affected Versions** MediaWiki versions 1.27.0 through 1.32.1 **Description** The issue is related to the transmission of invalid headers in the API, which can lead to a denial of service. An attacker could exploit this by passing invalid titles to the API, causing it to query the entire watchlist table. This could allow a remote attacker to cause a denial of service. **Recommendations** For versions 1.27.0 through 1.27.5, update to version 1.27.6. For versions 1.30.0 through 1.30.1, update to version 1.30.2. For versions 1.31.0 through 1.31.1, update to version 1.31.2. For versions 1.32.0 through 1.32.1, update to version 1.32.2.