CVE-2021-36125

CVE-2021-36125 affects MediaWiki’s CentralAuth extension (up to 1.36). The GlobalRenameRequest page is vulnerable to infinite loops/DoS when a user’s username exceeds a configured max (MaxNameChars). PT-2021-6527 provides concrete fixes: upgrade MediaWiki 1.36.x to 1.36.1 or later (also applies t...