CVE-2023-45363: MediaWiki Denial of Service Vulnerability
Summary
CVE-2023-45363: MediaWiki Denial of Service vulnerability. Affects mediawiki/core across 3 version ranges.
< 1.35.12
>= 1.36.0, < 1.39.5
>= 1.40.0, < 1.40.1
Fixed in 1.35.12, 1.39.5 or 1.40.1, depending on the release line you run. How to fix ↓
Also tracked for
The same CVE-2023-45363 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MediaWiki is a free and open-source wiki software platform used to power Wikipedia and other wikis. It provides a robust framework for collaborative editing and content management, featuring a wide array of extensions and customization options. However, certain versions of MediaWiki are susceptible to a Denial of Service (DoS) vulnerability that can be exploited under specific conditions.
Vulnerability Detail
The vulnerability arises from an issue in the ApiPageSet.php file within MediaWiki versions prior to 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. Attackers can exploit this vulnerability by querying pages that are redirected to other variants, especially when the 'redirects' and 'converttitles' parameters are set. This can lead to an unbounded loop, causing the application to throw a RequestTimeoutException, effectively resulting in a Denial of Service. The vulnerability is classified under CWE-835, indicating a potential for infinite loops in the code execution.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 1.35.121.35.12composer require mediawiki/core:1.35.12 -
>= 1.36.0, < 1.39.51.39.5composer require mediawiki/core:1.39.5 -
>= 1.40.0, < 1.40.11.40.1composer require mediawiki/core:1.40.1
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, users can disable the use of redirects and converttitles in their queries to mitigate the risk of triggering the vulnerability until they can apply the necessary updates.
Conclusion
CVE-2023-45363 represents a significant Denial of Service vulnerability in specific versions of MediaWiki. It is crucial for users to update their installations to the latest patched versions to safeguard against potential exploitation. Utilizing tools like Vulert can further enhance security by providing real-time monitoring for vulnerabilities.
See every vulnerability recorded for mediawiki/core →
FAQ
The impact of this vulnerability is a Denial of Service, which can render the MediaWiki application unresponsive to users.
Affected versions include MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
The CVSS score for CVE-2023-45363 is 7.5, indicating a high severity level.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities using just the composer.lock file.
Related vulnerabilities
Recent vulnerabilities recorded for mediawiki/core.
