CVE-2021-25893

概要

参考情報

• docs.magnolia-cms.com/product-docs/Releases/Release-notes-for-Magnolia-CMS-6.2.4.html · Release Notes
• itas.vn/itas-security-team-found-multi-vulnerabilities-on-magnolia-cms-platform · Exploit
• magnolia-cms.com · Vendor Advisory

magnolia cms のその他の脆弱性

• CVE-2022-33098中 6.1Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the Edit Contact function. This vulnerability …
• CVE-2021-46366高 8.8An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site R…
• CVE-2021-46365高 7.8An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute XML External Entity attacks via a crafted XLF file.
• CVE-2021-46364高 7.8A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file…
• CVE-2021-46363高 7.8An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files…