Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
TSPortal's Uncontrolled User Creation via Validation Side Effects Leads to Potential Denial of Service
Vulnerability Description
TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 34, a flaw in TSPortal allowed attackers to create arbitrary user records in the database by abusing validation logic. While validation correctly rejected invalid usernames, a side effect within a validation rule caused user records to be created regardless of whether the request succeeded. This could be exploited to cause uncontrolled database growth, leading to a potential denial of service (DoS). Version 34 contains a fix for the issue.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Vulnerability Title
TSPortal 安全漏洞
Vulnerability Description
TSPortal是Miraheze开源的一个团队管理平台。 TSPortal 34之前版本存在安全漏洞，该漏洞源于验证逻辑存在缺陷，可能导致攻击者创建任意用户记录，引发数据库不受控增长和拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A