MediaWiki up to 1.39.6/1.40.2/1.41.0 SpecialMovePage.php denial of service

Summaryinfo

A vulnerability, which was classified as problematic, was found in MediaWiki up to 1.39.6/1.40.2/1.41.0. Affected by this issue is some unknown functionality of the file includes/specials/SpecialMovePage.php. Such manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2024-34506. The attack can be launched remotely. No exploit exists. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in MediaWiki up to 1.39.6/1.40.2/1.41.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file includes/specials/SpecialMovePage.php. The manipulation with an unknown input leads to a denial of service vulnerability. Using CWE to declare the problem leads to CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. Impacted is availability. CVE summarizes:

An issue was discovered in includes/specials/SpecialMovePage.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. If a user with the necessary rights to move the page opens Special:MovePage for a page with tens of thousands of subpages, then the page will exceed the maximum request time, leading to a denial of service.

The advisory is shared for download at phabricator.wikimedia.org. This vulnerability is handled as CVE-2024-34506. The exploitation is known to be easy. The attack may be launched remotely. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1499.

By approaching the search of inurl:includes/specials/SpecialMovePage.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 1.39.7, 1.40.3 or 1.41.1 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Content Management System

Name

• MediaWiki

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.22
• 1.23
• 1.24
• 1.25
• 1.26
• 1.27
• 1.28
• 1.29
• 1.30
• 1.31
• 1.32
• 1.33
• 1.34
• 1.35
• 1.36
• 1.37
• 1.38
• 1.39
• 1.39.0
• 1.39.1
• 1.39.2
• 1.39.3
• 1.39.4
• 1.39.5
• 1.39.6
• 1.40
• 1.40.0
• 1.40.1
• 1.40.2
• 1.41.0

License

• open-source

Website

• Product: https://www.mediawiki.org/wiki/MediaWiki

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion