High severityNVD Advisory· Published Feb 11, 2022· Updated Aug 4, 2024
CVE-2021-46363
CVE-2021-46363
Description
An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported files with Microsoft Excel.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
info.magnolia:magnolia-coreMaven | < 6.2.4 | 6.2.4 |
Affected products
1Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-65hp-4vxr-c356ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2021-46363ghsaADVISORY
- docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.4.htmlghsax_refsource_MISCWEB
- github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-46363-Formula%20Injection-Magnolia%20CMSghsax_refsource_MISCWEB
News mentions
0No linked articles in our index yet.