CVE-2021-32774

DataDump is a MediaWiki extension that provides dumps of wikis. Prior to commit 67a82b76e186925330b89ace9c5fd893a300830b, DataDump had no protection against CSRF attacks so requests to generate or delete dumps could be forged. The vulnerability was patched in commit 67a82b76e186925330b89ace9c5fd893a300830b. There are no known workarounds. You must completely disable DataDump.

• CWE-352
• CWE-352

• https://github.com/miraheze/DataDump/commit/67a82b76e186925330b89ace9c5fd893a300830bPatch, Third Party Advisory
• https://github.com/miraheze/DataDump/security/advisories/GHSA-29mh-4vhv-x8mrPatch, Third Party Advisory
• https://phabricator.miraheze.org/T7593Third Party Advisory
• https://github.com/miraheze/DataDump/commit/67a82b76e186925330b89ace9c5fd893a300830bPatch, Third Party Advisory
• https://github.com/miraheze/DataDump/security/advisories/GHSA-29mh-4vhv-x8mrPatch, Third Party Advisory
• https://phabricator.miraheze.org/T7593Third Party Advisory

Published

Jul 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-32769Micronaut is a JVM-based, full stack Java framework designed…7.5
• CVE-2021-3277Nagios XI 5.7.5 and earlier allows authenticated admins to u…7.2
• CVE-2021-32770Gatsby is a framework for building websites. The gatsby-sour…7.5
• CVE-2021-32771Contiki-NG is an open-source, cross-platform operating syste…8.1
• CVE-2021-32772Poddycast is a podcast app made with Electron. Prior to vers…8.8
• CVE-2021-32773Racket is a general-purpose programming language and an ecos…7.5
• CVE-2021-32775Combodo iTop is a web based IT Service Management tool. In v…6.5
• CVE-2021-32776Combodo iTop is a web based IT Service Management tool. In v…8.8
• CVE-2021-32777Envoy is an open source L7 proxy and communication bus desig…8.3
• CVE-2021-32778Envoy is an open source L7 proxy and communication bus desig…7.5
• CVE-2021-32779Envoy is an open source L7 proxy and communication bus desig…8.3
• CVE-2021-3278Local Service Search Engine Management System 1.0 has a vuln…9.8