CVE-2026-33541
CVE-2026-33541 · TSPortal's Uncontrolled User Creation via Validation Side Effects Leads to Potential Denial of Service
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 34, a flaw in TSPortal allowed attackers to create arbitrary user records in the database by abusing validation logic. While validation correctly rejected invalid usernames, a side effect within a validation rule caused user records to be created regardless of whether the request succeeded. This could be exploited to cause uncontrolled database growth, leading to a potential denial of service (DoS). Version 34 contains a fix for the issue.
CVSS 6.5 · Mittel · EPSS 0,3% · Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: php
Betroffene Produkte und Versionen
tsportal
- Softwareversionen
- < 34: Betroffen
Keine Korrektur veröffentlicht
miraheze/ts-portal Packagist
- Softwareversionen
- v1
- v10
- v11
- v12
- v13
- v14
- v15
- v16
- v17
- v18
- v19
- v2
- v20
- v21
- v22
- v23
- v24
- v25
- v26
- v27
- v28
- v29
- v3
- v30
- v31
- v32
- v33
- v4
- v5
- v6
- v7
- v8
- v9
- Betroffene Versionsbereiche
- ECOSYSTEM: < 34
Auf 34 aktualisieren