← Database

CVE-2026-126562

MEDIUM CVSS: 4.3 Published: 2026-11-11 Modified: 2026-11-11

Description

Semantic MediaWiki 3.0.0 before 7.4.1 contains an uncontrolled recursion vulnerability in the ElasticStore ConceptDescriptionInterpreter that only detects directly self-referencing concepts. Users with page-edit rights can create mutually referencing concept pages, causing concept page views, Special:Ask, or api.php action=ask queries to exhaust PHP memory or stack.

Affected Platforms

Unknown

Weakness Type

CWE-674

References