CVE-2021-36125

An issue was discovered in the CentralAuth extension in MediaWiki through 1.36. The Special:GlobalRenameRequest page is vulnerable to infinite loops and denial of service attacks when a user's current username is beyond an arbitrary maximum configuration value (MaxNameChars).

• CWE-835

• https://gerrit.wikimedia.org/r/q/I97d8b3236b5abed8ba9a9c4d3ab5050c2e782c22Patch, Vendor Advisory
• https://phabricator.wikimedia.org/T260865Exploit, Issue Tracking, Patch, Vendor Advisory
• https://gerrit.wikimedia.org/r/q/I97d8b3236b5abed8ba9a9c4d3ab5050c2e782c22Patch, Vendor Advisory
• https://phabricator.wikimedia.org/T260865Exploit, Issue Tracking, Patch, Vendor Advisory

Published

Jul 2, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-3611A stack overflow vulnerability was found in the Intel HD Aud…6.5
• CVE-2021-3612An out-of-bounds memory write flaw was found in the Linux ke…7.8
• CVE-2021-36121An issue was discovered in Echo ShareCare 8.15.5. The file-u…8.8
• CVE-2021-36122An issue was discovered in Echo ShareCare 8.15.5. The UnzipF…8.8
• CVE-2021-36123An issue was discovered in Echo ShareCare 8.15.5. The TextRe…6.5
• CVE-2021-36124An issue was discovered in Echo ShareCare 8.15.5. It does no…9.8
• CVE-2021-36126An issue was discovered in the AbuseFilter extension in Medi…9.8
• CVE-2021-36127An issue was discovered in the CentralAuth extension in Medi…4.3
• CVE-2021-36128An issue was discovered in the CentralAuth extension in Medi…9.8
• CVE-2021-36129An issue was discovered in the Translate extension in MediaW…4.3
• CVE-2021-3613OpenVPN Connect 3.2.0 through 3.3.0 allows local users to lo…7.8
• CVE-2021-36130An XSS issue was discovered in the SocialProfile extension i…4.8