anonhaven

CVE-2026-100242

HIGH CVSS 3.1: 7.5 EPSS 0.34%
Updated Oct 01, 2026
Dependency
Parameter Value
CVSS 7.5 (HIGH)
Affected Versions before 1.47.0.
Type CWE-400 (Uncontrolled Resource Consumption)
Vendor Dependency
Public PoC No

Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Excessive Allocation. This issue affects Mediawiki - DataTransfer Extension: from 1.46.0 before 1.47.0.

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
None
No data leak
Integrity
None
No data modification
Availability
High
Complete denial of service

CVSS Vector v3.1

Weakness Type (CWE)

CWE-400 Uncontrolled Resource Consumption

References 3

https://gerrit.wikimedia.org/r/q/Ibc4a9070c2425b690bc767a882e4c35046a39be7
c4f26cc8-17ff-4c99-b5e2-38fc1793eacc
https://github.com/advisories/GHSA-xh5m-36r6-47m3
c4f26cc8-17ff-4c99-b5e2-38fc1793eacc
https://phabricator.wikimedia.org/T433275
c4f26cc8-17ff-4c99-b5e2-38fc1793eacc
Share Post Share Share Share