CVE-2025-53371
BaseFortify
Publication date: 2025-07-10
Last updated on: 2025-07-15
Assigner: GitHub, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| miraheze | discordnotifications | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-400 | The product does not properly control the allocation and maintenance of a limited resource. |
| CWE-918 | The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the DiscordNotifications extension for MediaWiki, which sends notifications to Discord channels. It allows attackers to send requests to arbitrary URLs via curl and file_get_contents functions configured by certain webhook URL settings. This can lead to Denial of Service (DoS) by making the server read large files. Additionally, Server-Side Request Forgery (SSRF) is possible if internal unprotected APIs are accessible via HTTP POST requests, potentially leading to Remote Code Execution (RCE).
How can this vulnerability impact me? :
The vulnerability can impact you by causing Denial of Service (DoS) on your server due to excessive resource consumption from reading large files. It also exposes your system to SSRF attacks, which may allow attackers to access internal APIs that are not protected. In the worst case, this could lead to Remote Code Execution (RCE), allowing attackers to execute arbitrary code on your server.
What immediate steps should I take to mitigate this vulnerability?
Apply the fix introduced in commit 1f20d850cbcce5b15951c7c6127b87b927a5415e to the DiscordNotifications extension for MediaWiki to prevent the vulnerability. Until the fix is applied, avoid setting or using arbitrary URLs in $wgDiscordIncomingWebhookUrl and $wgDiscordAdditionalIncomingWebhookUrls to prevent DOS, SSRF, and potential RCE attacks.