Deserialization of Untrusted Data in Magnolia CMS

Description

References

• nvd.nist.gov/vuln/detail/CVE-2021-46364 · ADVISORY
• docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.4.html · WEB
• DrunkenShells/Disclosures · WEB

Autres vulnérabilités de info.magnolia:magnolia-core

• CVE-2021-46366ÉLEVÉE 8.8An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site R…
• CVE-2021-46365ÉLEVÉE 7.8An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute XML External Entity attacks via a crafted XLF file.
• CVE-2021-46363ÉLEVÉE 7.8An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files…
• CVE-2021-46361CRITIQUE 9.8An issue in the Freemark Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrictions and execute arbitrary cod…