CVE-2022-33098

概要

参考情報

• packetstormsecurity.com/files/167705/Magnolia-CMS-6.2.19-Cross-Site-Scripting.html
• docs.magnolia-cms.com/product-docs/6.2/releases/release-notes-for-magnolia-cms-6.2.22

magnolia cms のその他の脆弱性

• CVE-2021-46366高 8.8An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site R…
• CVE-2021-46365高 7.8An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute XML External Entity attacks via a crafted XLF file.
• CVE-2021-46364高 7.8A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file…
• CVE-2021-46363高 7.8An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files…
• CVE-2021-46362緊急 9.8A Server-Side Template Injection (SSTI) vulnerability in the Registration and Forgotten Password forms of Magnolia v6.2.3 and below allows a…