VYPR

Datadump

by Miraheze

Source repositories

CVEs (2)

  • CVE-2024-47612LowOct 2, 2024
    risk 0.16cvss 3.5epss 0.00

    DataDump is a MediaWiki extension that provides dumps of wikis. Several interface messages are unescaped (more specifically, (datadump-table-column-queued), (datadump-table-column-in-progress), (datadump-table-column-completed), (datadump-table-column-failed)). If these messages…

  • CVE-2021-32774MedJul 20, 2021
    risk 0.00cvss 6.1epss 0.00

    DataDump is a MediaWiki extension that provides dumps of wikis. Prior to commit 67a82b76e186925330b89ace9c5fd893a300830b, DataDump had no protection against CSRF attacks so requests to generate or delete dumps could be forged. The vulnerability was patched in commit…