GHSA-jwx8-mm92-gv95: Semantic MediaWiki 3.0.0 before 7.4.1 Uncontrolled Recursion via ElasticStore ConceptDescriptionInterpreter
Semantic MediaWiki 3.0.0 before 7.4.1 contains an uncontrolled recursion vulnerability in the ElasticStore ConceptDescriptionInterpreter that only detects directly self-referencing concepts. Users with page-edit rights can create mutually referencing concept pages, causing concept page views, Special:Ask, or api.php action=ask queries to exhaust PHP memory or stack.
Event History
Frequently Asked Questions
Who can trigger the issue in a vulnerable deployment?
Any user with page-edit rights can create mutually referencing concept pages. Exploitation does not require an administrator role, but it does require the ability to edit pages.
What operations are affected when malicious concept references exist?
Viewing the affected concept page, running Special:Ask, or sending an api.php action=ask query can trigger the recursive processing. The result can exhaust PHP memory or stack resources.
Which versions need remediation?
Semantic MediaWiki versions from 3.0.0 through versions before 7.4.1 are affected. Upgrade to 7.4.1 or later.