Approved changes feed: RSS · Atom
cpe:2.3:a:miraheze:tsportal:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Miraheze (5ffeb676-d6da-5511-9ca2-20a2724bc0d2) |
|---|---|
| Product | Tsportal (5f276b46-bd26-5241-bc3f-32ee781b9eb7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-33541 |
vulnerable | 2026-06-08 07:59:10.353387 |
TSPortal's Uncontrolled User Creation via Validation Side Effects Leads to Potential Denial of Service
MEDIUM (6.5)
TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 34, a flaw in TSPortal allowed attackers to create arbitrary user records in the database by abusing validation logic. While validation correctly rejected invalid usernames, a side effect within a validation rule caused user records to be created regardless of whether the request succeeded. This could be exploited to cause uncontrolled database growth, leading to a potential denial of service (DoS). Version 34 contains a fix for the issue.
Published: 2026-03-26T20:27:05.840Z
Updated: 2026-03-27T20:01:35.174Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-29788 |
vulnerable | 2026-06-08 07:55:16.292317 |
TSPortal: Anyone can forge self-deletion requests of any user
TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 30, conversion of empty strings to null allows disguising DPA reports as genuine self-deletion reports. This issue has been patched in version 30.
Published: 2026-03-06T20:31:17.994Z
Updated: 2026-03-09T20:54:30.781Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.