CVEvulnerability
CVE-2023-45371
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-10-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-770
Description
An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. There is no rate limit for merging items.
Affected configurations
• mediawiki mediawiki (< 1.35.12)
• mediawiki mediawiki (>= 1.36.0 < 1.39.5)
• mediawiki mediawiki 1.40.0
Related
Weakness · CWE (1)
- CWE-770 Allocation of Resources Without Limits or Throttling weakness
References
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/961264 Issue Tracking, Vendor Advisory
- https://phabricator.wikimedia.org/T345064 Issue Tracking, Permissions Required
- https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Wikibase/+/961264 Issue Tracking, Vendor Advisory
- https://phabricator.wikimedia.org/T345064 Issue Tracking, Permissions Required