Security Advisory

CVE-2015-2936

7.1

Vulnerability Description

MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumption) via a long password.
Published Date April 13, 2015
Official Source NIST NVD Advisory