CVE-2021-32787

Sourcegraph is a code search and navigation engine. Sourcegraph before version 3.30.0 has two potential information leaks. The site-admin area can be accessed by regular users and all information and features are properly protected except for daily usage statistics and code intelligence uploads and indexes. It is not possible to alter the information, nor interact with any other features in the site-admin area. The issue is patched in version 3.30.0, where the information cannot be accessed by unprivileged users. There are no workarounds aside from upgrading.

• CWE-200

• https://github.com/sourcegraph/sourcegraph/commit/6e51f4546368d959a1f9f173d16e5f20c55deb56Patch, Third Party Advisory
• https://github.com/sourcegraph/sourcegraph/security/advisories/GHSA-mq5p-477h-xgwvThird Party Advisory
• https://github.com/sourcegraph/sourcegraph/commit/6e51f4546368d959a1f9f173d16e5f20c55deb56Patch, Third Party Advisory
• https://github.com/sourcegraph/sourcegraph/security/advisories/GHSA-mq5p-477h-xgwvThird Party Advisory

Published

Aug 2, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-32780Envoy is an open source L7 proxy and communication bus desig…7.5
• CVE-2021-32781Envoy is an open source L7 proxy and communication bus desig…7.5
• CVE-2021-32782Nextcloud Circles is an open source social network built for…5.4
• CVE-2021-32783Contour is a Kubernetes ingress controller using Envoy proxy…8.5
• CVE-2021-32785mod_auth_openidc is an authentication/authorization module f…7.5
• CVE-2021-32786mod_auth_openidc is an authentication/authorization module f…6.1
• CVE-2021-32788Discourse is an open source discussion platform. In versions…4.3
• CVE-2021-32789woocommerce-gutenberg-products-block is a feature plugin for…7.5
• CVE-2021-3279sz.chat version 4 allows injection of web scripts and HTML i…6.1
• CVE-2021-32790Woocommerce is an open source eCommerce plugin for WordPress…4.9
• CVE-2021-32791mod_auth_openidc is an authentication/authorization module f…5.9
• CVE-2021-32792mod_auth_openidc is an authentication/authorization module f…6.1