CVE-2021-25894

Description

References

• git.magnolia-cms.com/projects/MODULES/repos/public-user-registration/commits/80c096c24d39ba2050b778e68ef838d79d4811dc · Patch
• itas.vn/itas-security-team-found-multi-vulnerabilities-on-magnolia-cms-platform · Exploit
• magnolia-cms.com · Vendor Advisory

More vulnerabilities in magnolia cms

• CVE-2022-33098MEDIUM 6.1Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the Edit Contact function. This vulnerability …
• CVE-2021-46366HIGH 8.8An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site R…
• CVE-2021-46365HIGH 7.8An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute XML External Entity attacks via a crafted XLF file.
• CVE-2021-46364HIGH 7.8A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file…
• CVE-2021-46363HIGH 7.8An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files…