CVE Vulnerabilities

CVE-2019-12473

Published: Jul 10, 2019 | Modified: Jun 17, 2026
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

Wikimedia MediaWiki 1.27.0 through 1.32.1 might allow DoS. Passing invalid titles to the API could cause a DoS by querying the entire watchlist table. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6.

Affected Software

NameVendorStart VersionEnd Version
MediawikiMediawiki1.27.0 (including)1.27.6 (excluding)
MediawikiMediawiki1.30.0 (including)1.30.2 (excluding)
MediawikiMediawiki1.31.0 (including)1.31.2 (excluding)
MediawikiMediawiki1.32.0 (including)1.32.2 (excluding)
MediawikiUbuntubionic*
MediawikiUbuntucosmic*
MediawikiUbuntudevel*
MediawikiUbuntudisco*
MediawikiUbuntueoan*
MediawikiUbuntuesm-apps/bionic*
MediawikiUbuntuesm-apps/focal*
MediawikiUbuntuesm-apps/jammy*
MediawikiUbuntuesm-apps/noble*
MediawikiUbuntuesm-apps/resolute*
MediawikiUbuntufocal*
MediawikiUbuntugroovy*
MediawikiUbuntuhirsute*
MediawikiUbuntuimpish*
MediawikiUbuntujammy*
MediawikiUbuntukinetic*
MediawikiUbuntulunar*
MediawikiUbuntumantic*
MediawikiUbuntunoble*
MediawikiUbuntuoracular*
MediawikiUbuntuplucky*
MediawikiUbuntuquesting*
MediawikiUbunturesolute*
MediawikiUbuntustonking*
MediawikiUbuntutrusty*
MediawikiUbuntuupstream*

References