CVE-2021-32722

Name of the Vulnerable Software and Affected Versions GlobalNewFiles versions prior to 48be7adb70568e20e961ea1cb70904454a671b1d

Description The issue is related to an uncontrolled resource consumption vulnerability in the GlobalNewFiles mediawiki extension. A large amount of page moves within a short space of time could overwhelm Database servers due to improper handling of load balancing and a lack of an appropriate index.

Recommendations For versions prior to 48be7adb70568e20e961ea1cb70904454a671b1d, consider avoiding the use of the extension unless additional rate limits are enabled at the MediaWiki level or via PoolCounter / MySQL as a temporary workaround. Update to version 48be7adb70568e20e961ea1cb70904454a671b1d, which includes a patch for the vulnerability.