En resumen
- CVE-2021-46366 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a info.magnolia:magnolia-core, magnolia cms (magnolia-cms).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.76%, mayor que el 55.2% de las vulnerabilidades.
- Solución: actualizar a 6.2.4 o posterior.
Description
An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute force and exfiltrate users' credentials.
NVD description
An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute force and exfiltrate users' credentials.
Más vulnerabilidades de info.magnolia:magnolia-core
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free