Threat Investigation
Request a demo

CVE-2021-32774

Medium

Description

DataDump is a MediaWiki extension that provides dumps of wikis. Prior to commit 67a82b76e186925330b89ace9c5fd893a300830b, DataDump had no protection against CSRF attacks so requests to generate or delete dumps could be forged. The vulnerability was patched in commit 67a82b76e186925330b89ace9c5fd893a300830b. There are no known workarounds. You must completely disable DataDump.

SeverityMedium
CVSS6.1
Exploit probability—
ProductMiraheze Datadump
PublishedJul 20, 2021
First seenJul 20, 2021
Weakness typeCWE-352Cross-site request forgery (CSRF)

How to fix

Update
  • miraheze datadump2021-07-07 or later

Affected products

ProductAffected versionsFixed in
miraheze datadumpv < 2021-07-072021-07-07

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.