VULNERABILITY INTELLIGENCE

CVE-2012-4885

CVSS score5 MEDIUM
EPSS probability1.88%
CISA KEVNot currently listed
Published2012-09-09
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to cause a denial of service (infinite loop) via certain input, as demonstrated by the padleft function.

Primary references