Servers and applications
CVE-2015-2936
MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumption) via a long password.
- Severity
- High 7.1
- Published
- 13 Apr 2015
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
MediaWikiServers and applications · cpe:a:mediawiki:mediawiki |
|