VWE-2018-4625
Return to current revision
Current Revision
August 27, 2018, 1:25 PM
Differences in Content
-
[template]Vulnerability
| cve=
| aka=
| severity=High
| difficulty=Normal
| description=Denial of Service Amplification. A distributed attack that posts comments to a single wiki discussion may be able to achieve denial of service due to a flaw in the quick reply handler.
| lite= -
-| platform=XF
-
| discover-date=July 27, 2018
| patch-date=August 27, 2018
| patches=4.0.23 Patch Level 2
4.0.22 Patch Level 4
4.0.21 Patch Level 5
4.0.20 Patch Level 8
4.0.19 Patch Level 11
| workaround=In the Wiki admin panel, go to Permissions > Usergroups, and make sure that any usergroups that could potentially include large numbers of users do not have permission to post new comments.
[/template]