CVE-2021-31553
—CVSS 3.1
6.5 medium
EPSS
1%p71
Published
()
Modified
Description
An issue was discovered in the CheckUser extension for MediaWiki through 1.35.2. MediaWiki usernames with trailing whitespace could be stored in the cu_log database table such that denial of service occurred for certain CheckUser extension pages and functionality. For example, the attacker could turn off Special:CheckUserLog and thus interfere with usage tracking.
- Vendors
- mediawiki
- Products
- mediawiki
- Weakness
- CWE-428
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
In the news0 stories
No ingested article mentions this CVE yet.