In short
- CVE-2021-46366 is a HIGH (CVSS 8.8) vulnerability affecting info.magnolia:magnolia-core, magnolia cms (magnolia-cms).
- Chance of exploitation in the next 30 days (EPSS): 0.76%, higher than 55.2% of all vulnerabilities.
- Fix: update to 6.2.4 or later.
Description
An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute force and exfiltrate users' credentials.
NVD description
An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute force and exfiltrate users' credentials.
More vulnerabilities in info.magnolia:magnolia-core
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free