Servers and applications
CVE-2024-34506
An issue was discovered in includes/specials/SpecialMovePage.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. If a user with the necessary rights to move the page opens Special:MovePage for a page with tens of thousands of subpages, then the page will exceed the maximum request time, leading to a denial of service.
- Severity
- High 7.5
- Published
- 5 May 2024
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 1.39.7, 1.40.3, 1.41.1
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
MediaWikiServers and applications · cpe:a:mediawiki:mediawiki |
|