CVE-2021-36125

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36

published July 2, 2021

CVSS
—
EPSS
1%
Percentile
63.7
In the wild
Unconfirmed
What it is

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalRenameRequest page is vulnerable to infinite loops and denial of service attacks when a user's current username is beyond an arbitrary maximum configuration value (MaxNameChars).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01039 · 63.7th percentile
Published
2021-07-02T13:01Z
EPSS history
Timeline
  • 02 JUL 13:01Z
    An issue was discovered in the CentralAuth extension in MediaWiki through 1.36
    cvelistv5