MC
Product
Magnolia Cms
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 3Low 0
Watch
Add Magnolia Cms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-46366 | 8.8 | Feb 11 | An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute… Affected: before 6.2.4 |
| CVE-2021-46365 | 7.8 | Feb 11 | An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute XML External Entity attacks via a crafted XLF file Affected: before 6.2.4 |
| CVE-2021-46364 | 7.8 | Feb 11 | A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file Affected: before 6.2.4 |
| CVE-2021-46363 | 7.8 | Feb 11 | An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files Affected: before 6.2.4 |
Showing 4
