CVE-2023-37303: Critical severity MediaWiki MediaWiki vulnerability
An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In certain situations, an attempt to block a user fails after a temporary browser hang and a DBQueryDisconnectedError error message.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-37303?
CVE-2023-37303 is an issue discovered in the CheckUser extension for MediaWiki through version 1.39.3.
What is the severity of CVE-2023-37303?
The severity of CVE-2023-37303 is critical with a severity value of 9.8.
How does CVE-2023-37303 affect MediaWiki?
CVE-2023-37303 affects MediaWiki through version 1.39.3.
How can I fix CVE-2023-37303?
To fix CVE-2023-37303, you should update the CheckUser extension for MediaWiki to a version that is not affected.
Where can I find more information about CVE-2023-37303?
You can find more information about CVE-2023-37303 in the provided references: [Reference 1](https://gerrit.wikimedia.org/r/q/I10a9273c542576b3f7bb38de68dcd2aa41cfb1b0), [Reference 2](https://phabricator.wikimedia.org/T338276).