CVE-2026-33541

CVE-2026-33541 · TSPortal's Uncontrolled User Creation via Validation Side Effects Leads to Potential Denial of Service

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 34, a flaw in TSPortal allowed attackers to create arbitrary user records in the database by abusing validation logic. While validation correctly rejected invalid usernames, a side effect within a validation rule caused user records to be created regardless of whether the request succeeded. This could be exploited to cause uncontrolled database growth, leading to a potential denial of service (DoS). Version 34 contains a fix for the issue.

CVSS 6.5 · Средний · EPSS 0,3% · Есть исправление

Опубликовано

2026-03-26T20:27:05.840Z

Обновлено

2026-03-27T20:01:35.174Z

Стек: php

Проверьте свой сервер →