~ / search / GHSA-hxvf-35w8-f5mw

GHSA-hxvf-35w8-f5mw

Cross-Site Request Forgery in Magnolia CMS

Source: GitHub Advisory Database (reviewed) High CVE-2021-46366

Packages

EcosystemPackageAffectedFixed in
Maven info.magnolia:magnolia-core < 6.2.4 6.2.4

Details

As written in the advisory (Markdown source, shown as plain text).

An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute force and exfiltrate users' credentials.

References

External links from the advisory. They lead to third-party sites.