CVE-2021-32774

DataDump (a MediaWiki extension) is affected by a CSRF vulnerability because it lacked CSRF protection before commit 67a82b76e186925330b89ace9c5fd893a300830b. The flaw allowed forged requests to generate or delete dumps. The issue was mitigated by the patch in the cited commit. There are no publi...

CVE-2021-32774 Cross-Site Request Forgery (CSRF) in DataDump

DataDump is a MediaWiki extension that provides dumps of wikis. Prior to commit 67a82b76e186925330b89ace9c5fd893a300830b, DataDump had no protection against CSRF attacks so requests to generate or delete dumps could be forged. The vulnerability was patched in commit...

MediaWiki 跨站请求伪造漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. A security vulnerability exists in the MediaWiki extension DataDump, which stems from the fact th...