Threats tagged 'ghsa-xjgm-6w2q-3jqg'

Semantic MediaWiki versions from 2.5.0 up to but not including 7.3.1 contain a vulnerability that allows anonymous attackers to cause excessive resource consumption. By sending repeated requests to the Special:PropertyLabelSimilarity page with a limit parameter set to zero, attackers can bypass SQL limits and trigger quadratic computations. This leads to exhaustion of PHP CPU, memory, and database connections, resulting in a denial of service condition.