High severityNVD Advisory· Published Feb 11, 2022· Updated Aug 4, 2024
CVE-2021-46366
CVE-2021-46366
Description
An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute force and exfiltrate users' credentials.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
info.magnolia:magnolia-coreMaven | < 6.2.4 | 6.2.4 |
Affected products
2- Magnolia/CMSdescription
Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-hxvf-35w8-f5mwghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2021-46366ghsaADVISORY
- docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.4.htmlghsax_refsource_MISCWEB
- github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-46366-CSRF%2BOpen%20Redirect-Magnolia%20CMSghsax_refsource_MISCWEB
News mentions
0No linked articles in our index yet.