Semantic MediaWiki Search Parser Algorithmic Complexity DoS

Semantic MediaWiki versions 3.0.0 through 7.3.0 contain an algorithmic complexity vulnerability in the TermParser::normalize_compact_form() function that enables unauthenticated attackers to trigger quadratic CPU consumption. By crafting malicious search queries containing numerous in:(...) or has:(...) expressions and submitting them to Special:Search, attackers can exhaust PHP worker processes when the extended search engine is enabled. This vulnerability affects any organization running vulnerable Semantic MediaWiki installations without authentication restrictions on search functionality, potentially disrupting service availability and degrading platform performance for legitimate users.

While this CVE currently lacks MITRE ATT&CK mapping, Casky's AI-driven analysis with extended reasoning capabilities would identify attack patterns associated with resource exhaustion and denial of service tactics. Practitioners using Casky would detect anomalous search query patterns in their findings—specifically the presence of repeated, nested semantic search operators with increasing complexity that deviate from normal user behavior. Security teams would observe indicators of Denial of Service (ATT&CK T1499) through correlated signals: unusual CPU spikes on search-handling processes, repetitive malformed or computationally expensive queries in web logs, and timing patterns consistent with algorithmic attack vectors. The platform's skill mapping would help teams prioritize patching to version 7.3.1 or later and implement input validation controls on search query complexity.