Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2022-34750 Details

Description

An issue was discovered in MediaWiki through 1.38.1. The lemma length of a Wikibase lexeme is currently capped at a thousand characters. Unfortunately, this length is not validated, allowing much larger lexemes to be created, which introduces various denial-of-service attack vectors within the Wikibase and WikibaseLexeme extensions. This is related to Special:NewLexeme and Special:NewProperty.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://gerrit.wikimedia.org/r/q/I8171bfef73e525d73efa60b407ce147130ea4742 CVEVendor Advisory
https://gerrit.wikimedia.org/r/q/Id89a9b08e40f075d2d422cafd03668dff3ce7fc9 CVEVendor Advisory
https://phabricator.wikimedia.org/T308659 CVEMailing List
https://gerrit.wikimedia.org/r/q/I8171bfef73e525d73efa60b407ce147130ea4742 [email protected]Vendor Advisory
https://gerrit.wikimedia.org/r/q/Id89a9b08e40f075d2d422cafd03668dff3ce7fc9 [email protected]Vendor Advisory

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-770Allocation of Resources Without Limits or Throttling[email protected]

Affected Products

ProductVersions
mediawiki mediawiki
<= 1.38.1

CPE

  • cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

4 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2022-34750
NVD Published Date:
Jun 28, 2022
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2022-34750 Details - Not Deferred