CVE-2021-36129

An issue was discovered in the Translate extension in MediaWiki through 1.36. The Aggregategroups Action API module does not validate the parameter for aggregategroup when action=remove is set, thus allowing users with the translate-manage right to silently delete various groups' metadata.

• CWE-732

• https://gerrit.wikimedia.org/r/q/I3619a7e88c2eb979babb7b027d4fdbfabc0af792Patch, Vendor Advisory
• https://phabricator.wikimedia.org/T282932Exploit, Patch, Vendor Advisory
• https://gerrit.wikimedia.org/r/q/I3619a7e88c2eb979babb7b027d4fdbfabc0af792Patch, Vendor Advisory
• https://phabricator.wikimedia.org/T282932Exploit, Patch, Vendor Advisory

Published

Jul 2, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-36123An issue was discovered in Echo ShareCare 8.15.5. The TextRe…6.5
• CVE-2021-36124An issue was discovered in Echo ShareCare 8.15.5. It does no…9.8
• CVE-2021-36125An issue was discovered in the CentralAuth extension in Medi…7.5
• CVE-2021-36126An issue was discovered in the AbuseFilter extension in Medi…9.8
• CVE-2021-36127An issue was discovered in the CentralAuth extension in Medi…4.3
• CVE-2021-36128An issue was discovered in the CentralAuth extension in Medi…9.8
• CVE-2021-3613OpenVPN Connect 3.2.0 through 3.3.0 allows local users to lo…7.8
• CVE-2021-36130An XSS issue was discovered in the SocialProfile extension i…4.8
• CVE-2021-36131An XSS issue was discovered in the SportsTeams extension in …4.8
• CVE-2021-36132An issue was discovered in the FileImporter extension in Med…8.8
• CVE-2021-36133The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks secur…7.1
• CVE-2021-36134Out of bounds write vulnerability in the JPEG parsing code o…6.5