Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2019-12473

Published: Jul 10, 2019 | Modified: Aug 24, 2020
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2019-12473
CWEhttps://cwe.mitre.org/data/definitions/.html

Wikimedia MediaWiki 1.27.0 through 1.32.1 might allow DoS. Passing invalid titles to the API could cause a DoS by querying the entire watchlist table. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

Affected Software

Name Vendor Start Version End Version
Mediawiki Mediawiki 1.27.0 (including) 1.27.6 (excluding)
Mediawiki Mediawiki 1.30.0 (including) 1.30.2 (excluding)
Mediawiki Mediawiki 1.31.0 (including) 1.31.2 (excluding)
Mediawiki Mediawiki 1.32.0 (including) 1.32.2 (excluding)
Mediawiki Ubuntu bionic *
Mediawiki Ubuntu cosmic *
Mediawiki Ubuntu devel *
Mediawiki Ubuntu disco *
Mediawiki Ubuntu eoan *
Mediawiki Ubuntu esm-apps/bionic *
Mediawiki Ubuntu focal *
Mediawiki Ubuntu groovy *
Mediawiki Ubuntu hirsute *
Mediawiki Ubuntu impish *
Mediawiki Ubuntu jammy *
Mediawiki Ubuntu kinetic *
Mediawiki Ubuntu lunar *
Mediawiki Ubuntu mantic *
Mediawiki Ubuntu noble *
Mediawiki Ubuntu oracular *
Mediawiki Ubuntu trusty *
Mediawiki Ubuntu upstream *

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2024 Aqua Security Software Ltd.   Privacy Policy | Terms of Use