Threats tagged 'ghsa-p6m4-5726-45x8'

Semantic MediaWiki versions from 3.0.0 up to but not including 7.3.1 contain an uncontrolled recursion vulnerability in the LegacyParser::getSubqueryDescription() function. This flaw allows unauthenticated attackers to submit deeply nested query elements to the action=ask API, causing excessive CPU and memory consumption that can tie up server request workers. The vulnerability leads to a denial-of-service condition by exhausting server resources.