CVE-2026-33541

CVE-2026-33541 · TSPortal's Uncontrolled User Creation via Validation Side Effects Leads to Potential Denial of Service

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 34, a flaw in TSPortal allowed attackers to create arbitrary user records in the database by abusing validation logic. While validation correctly rejected invalid usernames, a side effect within a validation rule caused user records to be created regardless of whether the request succeeded. This could be exploited to cause uncontrolled database growth, leading to a potential denial of service (DoS). Version 34 contains a fix for the issue.

CVSS 6.5 · Moyenne · EPSS 0,3% · Correctif disponible

Publication

2026-03-26T20:27:05.840Z

Mise à jour

2026-03-27T20:01:35.174Z

Pile logicielle: php

Vérifiez votre serveur →