Wikimedia Foundation MediaWiki VisualData Extension Regular Expression Exponential Blowup Vulnerability

A vulnerability allowing regular expression exponential blowup has been identified in the Wikimedia Foundation MediaWiki VisualData Extension, specifically in version 1.45. This issue arises from inefficient regular expression complexity, which can lead to performance degradation by causing certain patterns to take an excessive amount of time to process.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, where the application becomes unresponsive or significantly slower due to the excessive processing time required by the problematic regular expressions.