Medium severity6.5NVD Advisory· Published Mar 31, 2023· Updated Jun 17, 2026

CVE-2023-29139

Description

An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. When a user with checkuserlog permissions makes many CheckUserLog API requests in some configurations, denial of service can occur (RequestTimeoutException or upstream request timeout).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MediaWiki/Checkuserllm-fuzzy
Range: <=1.39.3
osv-coords
pkg:bitnami/mediawiki
Range: < 1.39.4
MediaWiki/Mediawiki2 versions
cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*range: <=1.39.3
- (no CPE)

Patches

Vulnerability mechanics

References

phabricator.wikimedia.org/T326293nvdPatch

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000