CVE-2022-28204

A denial-of-service issue was discovered in MediaWiki 1.37.x before 1.37.2. Rendering of w/index.php?title=Special%3AWhatLinksHere&target=Property%3AP31&namespace=1&invert=1 can take more than thirty seconds. There is a DDoS risk.

• CWE-400

• https://phabricator.wikimedia.org/T297754Exploit, Issue Tracking, Patch, Vendor Advisory
• https://phabricator.wikimedia.org/T297754Exploit, Issue Tracking, Patch, Vendor Advisory

Published

Sep 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-28199NVIDIA’s distribution of the Data Plane Development Kit (MLN…6.5
• CVE-2022-2820Session Fixation in GitHub repository namelessmc/nameless pr…8.2
• CVE-2022-28200NVIDIA DGX A100 contains a vulnerability in SBIOS in the Bio…8.2
• CVE-2022-28201An issue was discovered in MediaWiki before 1.35.6, 1.36.x b…4.4
• CVE-2022-28202An XSS issue was discovered in MediaWiki before 1.35.6, 1.36…6.1
• CVE-2022-28203A denial-of-service issue was discovered in MediaWiki before…7.5
• CVE-2022-28205An issue was discovered in MediaWiki through 1.37.1. The Cen…9.8
• CVE-2022-28206An issue was discovered in MediaWiki through 1.37.1. ImportP…9.8
• CVE-2022-28209An issue was discovered in Mediawiki through 1.37.1. The che…9.8
• CVE-2022-2821Missing Critical Step in Authentication in GitHub repository…7.5
• CVE-2022-28213When a user access SOAP Web services in SAP BusinessObjects …8.1
• CVE-2022-28214During an update of SAP BusinessObjects Enterprise, Central …7.8