CVE-2026-33541 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Pri…
Medium CVSS: 6.5

CVE-2026-33541

TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 34, a flaw in TSPortal allowed attackers to create arbitrary user records in the database by abusing validation logic. While validation correctly rejected invalid usernames, a side effect within a validation rule caused user records to be created regardless of whether the request succeeded. This could be exploited to cause uncontrolled database growth, leading to a potential denial of service (DoS). Version 34 contains a fix for the issue.
Vendor
Wikitide
Product
Tsportal
CWE
CWE-400
Yayın Tarihi
2026-03-26 21:17:05
Güncelleme
2026-04-03 20:20:56
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

Referanslar