Em resumo
- CVE-2021-46366 é uma vulnerabilidade ALTO (CVSS 8.8) que afeta info.magnolia:magnolia-core, magnolia cms (magnolia-cms).
- Chance de exploração nos próximos 30 dias (EPSS): 0.76%, maior que 55.2% das vulnerabilidades.
- Correção: atualize para 6.2.4 ou posterior.
Description
An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute force and exfiltrate users' credentials.
NVD description
An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute force and exfiltrate users' credentials.
Mais vulnerabilidades de info.magnolia:magnolia-core
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free