cnvd - cnvd-2022-23511

cnvd-2022-23511

Vulnerability from cnvd

Title: DynamicPageList3扩展资源管理错误漏洞

Description:

DynamicPageList3扩展是MediaWiki的一个报告工具，以各种格式和详细信息列出类别成员和交叉点。

DynamicPageList3扩展存在资源管理错误漏洞，该漏洞源于DPL解析器函数的参数中输入了未经处理的正则表达式日期，攻击者可利用漏洞出现 ReDoS（正则表达式拒绝服务）。

Severity: 中

Patch Name: DynamicPageList3扩展资源管理错误漏洞的补丁

Patch Description:

DynamicPageList3扩展是MediaWiki的一个报告工具，以各种格式和详细信息列出类别成员和交叉点。

DynamicPageList3扩展存在资源管理错误漏洞，该漏洞源于DPL解析器函数的参数中输入了未经处理的正则表达式日期，攻击者可利用漏洞出现 ReDoS（正则表达式拒绝服务）。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://github.com/Universal-Omega/DynamicPageList3/security/advisories/GHSA-8f24-q75c-jhf4

Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-41118

Impacted products

Name
DynamicPageList3 DynamicPageList3 <3.3.6

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-41118"
    }
  },
  "description": "DynamicPageList3\u6269\u5c55\u662fMediaWiki\u7684\u4e00\u4e2a\u62a5\u544a\u5de5\u5177\uff0c\u4ee5\u5404\u79cd\u683c\u5f0f\u548c\u8be6\u7ec6\u4fe1\u606f\u5217\u51fa\u7c7b\u522b\u6210\u5458\u548c\u4ea4\u53c9\u70b9\u3002\n\nDynamicPageList3\u6269\u5c55\u5b58\u5728\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eDPL\u89e3\u6790\u5668\u51fd\u6570\u7684\u53c2\u6570\u4e2d\u8f93\u5165\u4e86\u672a\u7ecf\u5904\u7406\u7684\u6b63\u5219\u8868\u8fbe\u5f0f\u65e5\u671f\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u51fa\u73b0 ReDoS\uff08\u6b63\u5219\u8868\u8fbe\u5f0f\u62d2\u7edd\u670d\u52a1\uff09\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://github.com/Universal-Omega/DynamicPageList3/security/advisories/GHSA-8f24-q75c-jhf4",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-23511",
  "openTime": "2022-03-29",
  "patchDescription": "DynamicPageList3\u6269\u5c55\u662fMediaWiki\u7684\u4e00\u4e2a\u62a5\u544a\u5de5\u5177\uff0c\u4ee5\u5404\u79cd\u683c\u5f0f\u548c\u8be6\u7ec6\u4fe1\u606f\u5217\u51fa\u7c7b\u522b\u6210\u5458\u548c\u4ea4\u53c9\u70b9\u3002\r\n\r\nDynamicPageList3\u6269\u5c55\u5b58\u5728\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eDPL\u89e3\u6790\u5668\u51fd\u6570\u7684\u53c2\u6570\u4e2d\u8f93\u5165\u4e86\u672a\u7ecf\u5904\u7406\u7684\u6b63\u5219\u8868\u8fbe\u5f0f\u65e5\u671f\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u51fa\u73b0 ReDoS\uff08\u6b63\u5219\u8868\u8fbe\u5f0f\u62d2\u7edd\u670d\u52a1\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "DynamicPageList3\u6269\u5c55\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "DynamicPageList3 DynamicPageList3 \u003c3.3.6"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2021-41118",
  "serverity": "\u4e2d",
  "submitTime": "2021-10-09",
  "title": "DynamicPageList3\u6269\u5c55\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e"
}

CVE-2021-41118 (GCVE-0-2021-41118)

Vulnerability from cvelistv5

Published

2021-10-04 18:35

Modified

2024-08-04 02:59

Severity ?

5.3 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-400 - Uncontrolled Resource Consumption

Summary

The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with various formats and details. In affected versions unsanitised input of regular expression date within the parameters of the DPL parser function, allowed for the possibility of ReDoS (Regex Denial of Service). This has been resolved in version 3.3.6. If you are unable to update you may also set `$wgDplSettings['functionalRichness'] = 0;` or disable DynamicPageList3 to mitigate.

References

▼	URL	Tags
	https://github.com/Universal-Omega/DynamicPageList3/security/advisories/GHSA-8f24-q75c-jhf4	x_refsource_CONFIRM
	https://github.com/Universal-Omega/DynamicPageList3/commit/2c04dafb37a14d9ccfe070f53e7f11bbca0156e7	x_refsource_MISC
	https://github.com/Universal-Omega/DynamicPageList3/releases/tag/3.3.6	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Universal-Omega	DynamicPageList3	Version: < 3.3.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T02:59:31.433Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/Universal-Omega/DynamicPageList3/security/advisories/GHSA-8f24-q75c-jhf4"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/Universal-Omega/DynamicPageList3/commit/2c04dafb37a14d9ccfe070f53e7f11bbca0156e7"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/Universal-Omega/DynamicPageList3/releases/tag/3.3.6"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "DynamicPageList3",
          "vendor": "Universal-Omega",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.3.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with various formats and details. In affected versions unsanitised input of regular expression date within the parameters of the DPL parser function, allowed for the possibility of ReDoS (Regex Denial of Service). This has been resolved in version 3.3.6. If you are unable to update you may also set `$wgDplSettings[\u0027functionalRichness\u0027] = 0;` or disable DynamicPageList3 to mitigate."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-10-04T18:35:10",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/Universal-Omega/DynamicPageList3/security/advisories/GHSA-8f24-q75c-jhf4"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/Universal-Omega/DynamicPageList3/commit/2c04dafb37a14d9ccfe070f53e7f11bbca0156e7"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/Universal-Omega/DynamicPageList3/releases/tag/3.3.6"
        }
      ],
      "source": {
        "advisory": "GHSA-8f24-q75c-jhf4",
        "discovery": "UNKNOWN"
      },
      "title": "ReDoS in DynamicPageList3",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security-advisories@github.com",
          "ID": "CVE-2021-41118",
          "STATE": "PUBLIC",
          "TITLE": "ReDoS in DynamicPageList3"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "DynamicPageList3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "\u003c 3.3.6"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Universal-Omega"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with various formats and details. In affected versions unsanitised input of regular expression date within the parameters of the DPL parser function, allowed for the possibility of ReDoS (Regex Denial of Service). This has been resolved in version 3.3.6. If you are unable to update you may also set `$wgDplSettings[\u0027functionalRichness\u0027] = 0;` or disable DynamicPageList3 to mitigate."
            }
          ]
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-400: Uncontrolled Resource Consumption"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/Universal-Omega/DynamicPageList3/security/advisories/GHSA-8f24-q75c-jhf4",
              "refsource": "CONFIRM",
              "url": "https://github.com/Universal-Omega/DynamicPageList3/security/advisories/GHSA-8f24-q75c-jhf4"
            },
            {
              "name": "https://github.com/Universal-Omega/DynamicPageList3/commit/2c04dafb37a14d9ccfe070f53e7f11bbca0156e7",
              "refsource": "MISC",
              "url": "https://github.com/Universal-Omega/DynamicPageList3/commit/2c04dafb37a14d9ccfe070f53e7f11bbca0156e7"
            },
            {
              "name": "https://github.com/Universal-Omega/DynamicPageList3/releases/tag/3.3.6",
              "refsource": "MISC",
              "url": "https://github.com/Universal-Omega/DynamicPageList3/releases/tag/3.3.6"
            }
          ]
        },
        "source": {
          "advisory": "GHSA-8f24-q75c-jhf4",
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2021-41118",
    "datePublished": "2021-10-04T18:35:10",
    "dateReserved": "2021-09-15T00:00:00",
    "dateUpdated": "2024-08-04T02:59:31.433Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted