Vulnerability-Lookup

CNVD-2022-23511

Vulnerability from cnvd - Published: 2022-03-29

Title

DynamicPageList3扩展资源管理错误漏洞

Description

DynamicPageList3扩展是MediaWiki的一个报告工具，以各种格式和详细信息列出类别成员和交叉点。 DynamicPageList3扩展存在资源管理错误漏洞，该漏洞源于DPL解析器函数的参数中输入了未经处理的正则表达式日期，攻击者可利用漏洞出现 ReDoS（正则表达式拒绝服务）。

Severity

中

Patch Name

DynamicPageList3扩展资源管理错误漏洞的补丁

Patch Description

DynamicPageList3扩展是MediaWiki的一个报告工具，以各种格式和详细信息列出类别成员和交叉点。 DynamicPageList3扩展存在资源管理错误漏洞，该漏洞源于DPL解析器函数的参数中输入了未经处理的正则表达式日期，攻击者可利用漏洞出现 ReDoS（正则表达式拒绝服务）。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://github.com/Universal-Omega/DynamicPageList3/security/advisories/GHSA-8f24-q75c-jhf4

Reference

https://nvd.nist.gov/vuln/detail/CVE-2021-41118

Impacted products

Name
DynamicPageList3 DynamicPageList3 <3.3.6

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-41118"
    }
  },
  "description": "DynamicPageList3\u6269\u5c55\u662fMediaWiki\u7684\u4e00\u4e2a\u62a5\u544a\u5de5\u5177\uff0c\u4ee5\u5404\u79cd\u683c\u5f0f\u548c\u8be6\u7ec6\u4fe1\u606f\u5217\u51fa\u7c7b\u522b\u6210\u5458\u548c\u4ea4\u53c9\u70b9\u3002\n\nDynamicPageList3\u6269\u5c55\u5b58\u5728\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eDPL\u89e3\u6790\u5668\u51fd\u6570\u7684\u53c2\u6570\u4e2d\u8f93\u5165\u4e86\u672a\u7ecf\u5904\u7406\u7684\u6b63\u5219\u8868\u8fbe\u5f0f\u65e5\u671f\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u51fa\u73b0 ReDoS\uff08\u6b63\u5219\u8868\u8fbe\u5f0f\u62d2\u7edd\u670d\u52a1\uff09\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://github.com/Universal-Omega/DynamicPageList3/security/advisories/GHSA-8f24-q75c-jhf4",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-23511",
  "openTime": "2022-03-29",
  "patchDescription": "DynamicPageList3\u6269\u5c55\u662fMediaWiki\u7684\u4e00\u4e2a\u62a5\u544a\u5de5\u5177\uff0c\u4ee5\u5404\u79cd\u683c\u5f0f\u548c\u8be6\u7ec6\u4fe1\u606f\u5217\u51fa\u7c7b\u522b\u6210\u5458\u548c\u4ea4\u53c9\u70b9\u3002\r\n\r\nDynamicPageList3\u6269\u5c55\u5b58\u5728\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eDPL\u89e3\u6790\u5668\u51fd\u6570\u7684\u53c2\u6570\u4e2d\u8f93\u5165\u4e86\u672a\u7ecf\u5904\u7406\u7684\u6b63\u5219\u8868\u8fbe\u5f0f\u65e5\u671f\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u51fa\u73b0 ReDoS\uff08\u6b63\u5219\u8868\u8fbe\u5f0f\u62d2\u7edd\u670d\u52a1\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "DynamicPageList3\u6269\u5c55\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "DynamicPageList3 DynamicPageList3 \u003c3.3.6"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2021-41118",
  "serverity": "\u4e2d",
  "submitTime": "2021-10-09",
  "title": "DynamicPageList3\u6269\u5c55\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e"
}

CVE-2021-41118 (GCVE-0-2021-41118)

Vulnerability from cvelistv5 – Published: 2021-10-04 18:35 – Updated: 2024-08-04 02:59

Title

ReDoS in DynamicPageList3

Summary

The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with various formats and details. In affected versions unsanitised input of regular expression date within the parameters of the DPL parser function, allowed for the possibility of ReDoS (Regex Denial of Service). This has been resolved in version 3.3.6. If you are unable to update you may also set `$wgDplSettings['functionalRichness'] = 0;` or disable DynamicPageList3 to mitigate.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7963 records in the last 180 days details

References

3 references

URL	Tags
https://github.com/Universal-Omega/DynamicPageLis…	x_refsource_CONFIRM
https://github.com/Universal-Omega/DynamicPageLis…	x_refsource_MISC
https://github.com/Universal-Omega/DynamicPageLis…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Universal-Omega	DynamicPageList3	Affected: < 3.3.6

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T02:59:31.433Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/Universal-Omega/DynamicPageList3/security/advisories/GHSA-8f24-q75c-jhf4"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/Universal-Omega/DynamicPageList3/commit/2c04dafb37a14d9ccfe070f53e7f11bbca0156e7"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/Universal-Omega/DynamicPageList3/releases/tag/3.3.6"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "DynamicPageList3",
          "vendor": "Universal-Omega",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 3.3.6"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with various formats and details. In affected versions unsanitised input of regular expression date within the parameters of the DPL parser function, allowed for the possibility of ReDoS (Regex Denial of Service). This has been resolved in version 3.3.6. If you are unable to update you may also set `$wgDplSettings[\u0027functionalRichness\u0027] = 0;` or disable DynamicPageList3 to mitigate."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-10-04T18:35:10.000Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/Universal-Omega/DynamicPageList3/security/advisories/GHSA-8f24-q75c-jhf4"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/Universal-Omega/DynamicPageList3/commit/2c04dafb37a14d9ccfe070f53e7f11bbca0156e7"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/Universal-Omega/DynamicPageList3/releases/tag/3.3.6"
        }
      ],
      "source": {
        "advisory": "GHSA-8f24-q75c-jhf4",
        "discovery": "UNKNOWN"
      },
      "title": "ReDoS in DynamicPageList3",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security-advisories@github.com",
          "ID": "CVE-2021-41118",
          "STATE": "PUBLIC",
          "TITLE": "ReDoS in DynamicPageList3"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "DynamicPageList3",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "\u003c 3.3.6"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Universal-Omega"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The DynamicPageList3 extension is a reporting tool for MediaWiki, listing category members and intersections with various formats and details. In affected versions unsanitised input of regular expression date within the parameters of the DPL parser function, allowed for the possibility of ReDoS (Regex Denial of Service). This has been resolved in version 3.3.6. If you are unable to update you may also set `$wgDplSettings[\u0027functionalRichness\u0027] = 0;` or disable DynamicPageList3 to mitigate."
            }
          ]
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-400: Uncontrolled Resource Consumption"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/Universal-Omega/DynamicPageList3/security/advisories/GHSA-8f24-q75c-jhf4",
              "refsource": "CONFIRM",
              "url": "https://github.com/Universal-Omega/DynamicPageList3/security/advisories/GHSA-8f24-q75c-jhf4"
            },
            {
              "name": "https://github.com/Universal-Omega/DynamicPageList3/commit/2c04dafb37a14d9ccfe070f53e7f11bbca0156e7",
              "refsource": "MISC",
              "url": "https://github.com/Universal-Omega/DynamicPageList3/commit/2c04dafb37a14d9ccfe070f53e7f11bbca0156e7"
            },
            {
              "name": "https://github.com/Universal-Omega/DynamicPageList3/releases/tag/3.3.6",
              "refsource": "MISC",
              "url": "https://github.com/Universal-Omega/DynamicPageList3/releases/tag/3.3.6"
            }
          ]
        },
        "source": {
          "advisory": "GHSA-8f24-q75c-jhf4",
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2021-41118",
    "datePublished": "2021-10-04T18:35:10.000Z",
    "dateReserved": "2021-09-15T00:00:00.000Z",
    "dateUpdated": "2024-08-04T02:59:31.433Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted