VDB
CVE-2022-28203
CVE-2022-28203
PUBLISHED
CVSS 7.5 HIGH
A denial-of-service issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1.37.2. When many files exist, requesting Special:NewFiles with actor as a condition can result in a very long running query.
EPSS 1.47% · 73.4th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
1.47%
73.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| mediawiki | mediawiki | 0, 1.36.0, 1.37.0 |
| debian | debian_linux | 10.0, 11.0 |
| n/a | n/a | * |
Timeline
- Sep 19, 2022 CVE Published
- Sep 20, 2022 EPSS Score
- Nov 4, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 3, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 21, 2023 EPSS Score
- May 5, 2023 EPSS Score
- Jun 20, 2023 EPSS Score
- Sep 19, 2023 EPSS Score
- Nov 3, 2023 EPSS Score
- Dec 19, 2023 EPSS Score