← All advisories

High severityNVD Advisory· Published Feb 11, 2022· Updated Aug 4, 2024

CVE-2021-46365

CVE-2021-46365

Description

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute XML External Entity attacks via a crafted XLF file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
info.magnolia:magnolia-coreMaven	< 6.2.4	6.2.4

Affected products

2

Magnolia/Magnoliadescription
ghsa-coords
pkg:maven/info.magnolia/magnolia-core
Range: < 6.2.4

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-3qpg-33wr-533jghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-46365ghsaADVISORY
docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.4.htmlghsax_refsource_MISCWEB
github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-46365-Unsafe%20XML%20Parsing-Magnolia%20CMSghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.