PT-2026-126338
CVE-2026-116877
·
Published
2026-10-27
·
Updated
2026-10-27
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows low-privilege editors to bypass smwgMaxNumRecurringEvents by supplying a large limit parameter. Attackers can save pages using #set recurring event without an end date to generate thousands or millions of date subobjects, exhausting CPU, memory, and database resources.
Found an issue in the description? Have something to add? Feel free to write us 👾