CVE-2021-32722

GlobalNewFiles is a mediawiki extension. Versions prior to 48be7adb70568e20e961ea1cb70904454a671b1d are affected by an uncontrolled resource consumption vulnerability. A large amount of page moves within a short space of time could overwhelm Database servers due to improper handling of load balancing and a lack of an appropriate index. As a workaround, one may avoid use of the extension unless additional rate limit at the MediaWiki level or via PoolCounter / MySQL is enabled. A patch is available in version 48be7adb70568e20e961ea1cb70904454a671b1d.

• CWE-400
• CWE-400

• https://github.com/miraheze/GlobalNewFiles/commit/48be7adb70568e20e961ea1cb70904454a671b1dPatch, Third Party Advisory
• https://github.com/miraheze/GlobalNewFiles/pull/17Patch, Third Party Advisory
• https://github.com/miraheze/GlobalNewFiles/security/advisories/GHSA-cwv5-c938-5h5hThird Party Advisory
• https://phabricator.miraheze.org/T7532Issue Tracking, Vendor Advisory
• https://github.com/miraheze/GlobalNewFiles/commit/48be7adb70568e20e961ea1cb70904454a671b1dPatch, Third Party Advisory
• https://github.com/miraheze/GlobalNewFiles/pull/17Patch, Third Party Advisory
• https://github.com/miraheze/GlobalNewFiles/security/advisories/GHSA-cwv5-c938-5h5hThird Party Advisory
• https://phabricator.miraheze.org/T7532Issue Tracking, Vendor Advisory

Published

Jun 28, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-32717Shopware is an open source eCommerce platform. In versions p…7.5
• CVE-2021-32718RabbitMQ is a multi-protocol messaging broker. In rabbitmq-s…5.4
• CVE-2021-32719RabbitMQ is a multi-protocol messaging broker. In rabbitmq-s…4.8
• CVE-2021-3272jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 ha…5.5
• CVE-2021-32720Sylius is an Open Source eCommerce platform on top of Symfon…5.3
• CVE-2021-32721PowerMux is a drop-in replacement for Go's http.ServeMux. In…6.1
• CVE-2021-32723Prism is a syntax highlighting library. Some languages befor…6.5
• CVE-2021-32724check-spelling is a github action which provides CI spell ch…9.9
• CVE-2021-32725Nextcloud Server is a Nextcloud package that handles data st…5.3
• CVE-2021-32726Nextcloud Server is a Nextcloud package that handles data st…9.8
• CVE-2021-32727Nextcloud Android Client is the Android client for Nextcloud…7.5
• CVE-2021-32728The Nextcloud Desktop Client is a tool to synchronize files …6.5