Description
An issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. Users with the editinterface permission can trigger infinite recursion, because a bare local interwiki is mishandled for the mainpage message.
Remediation
References
Related Vulnerabilities
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-4203)
WordPress Plugin Easy2Map Photos Multiple Vulnerabilities (1.0.9)
WordPress Plugin Lim4wp 'upload.php' Arbitrary File Upload (1.1.1)
phpMyAdmin CVE-2016-6633 Vulnerability (CVE-2016-6633)
OpenSSL Resource Management Errors Vulnerability (CVE-2011-4619)