Description
MediaWiki before 1.36.2 allows a denial of service (resource consumption because of lengthy query processing time). ApiQueryBacklinks (action=query&list=backlinks) can cause a full table scan.
Remediation
References
Related Vulnerabilities
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-3171)
Oracle Database Server CVE-2007-2115 Vulnerability (CVE-2007-2115)
Moodle Improper Access Control Vulnerability (CVE-2015-2267)
Joomla! Core 4.x.x Cross-Site Scripting (4.0.0 - 4.2.4)
WordPress Plugin GEO my WordPress Unspecified Vulnerability (2.6.1.1)