CVE Catalog
CVE-2023-37303
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk0.80%
52th percentile - higher than 52% of all known CVEs
Summary
An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3, where an attempt to block a user fails after a temporary browser hang, resulting in a DBQueryDisconnectedError error message.
Risk Assessment
The organization may face difficulties in managing users, potentially leading to unauthorized access or abuse within the system.
Recommendation
It is recommended to update the CheckUser extension to the latest version to mitigate this vulnerability and to monitor logs for potential abuse.
Original NVD description (English source)
An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In certain situations, an attempt to block a user fails after a temporary browser hang and a DBQueryDisconnectedError error message.