Threats tagged 'ghsa-2472-xm32-fr75'

Semantic MediaWiki versions from 2.5.0 up to but not including 7.3.1 contain an uncontrolled resource consumption vulnerability. This flaw allows low-privilege editors to bypass the smwgMaxNumRecurringEvents limit by supplying a large limit parameter. Attackers can exploit this by saving pages with #set_recurring_event without specifying an end date, causing the creation of thousands or millions of date subobjects. This results in exhaustion of CPU, memory, and database resources, leading to denial of service conditions.