Lucene search

Arbitrary code execution in Magnolia CMS

🗓️ 12 Feb 2022 00:37:00Reported by GitHub Advisory DatabaseType

Arbitrary code execution in Magnolia CMS v6.2.1

Reporter	Title	Published	Views	Family All 7
OSV	Arbitrary code execution in Magnolia CMS	12 Feb 202200:00	–	osv
Cvelist	CVE-2021-46361	11 Feb 202220:08	–	cvelist
Veracode	Arbitrary Code Execution	17 Feb 202212:18	–	veracode
CVE	CVE-2021-46361	11 Feb 202221:15	–	cve
Prion	Security feature bypass	11 Feb 202221:15	–	prion
NVD	CVE-2021-46361	11 Feb 202221:15	–	nvd
CNVD	Magnolia CMS has an unspecified vulnerability (CNVD-2022-13381)	15 Feb 202200:00	–	cnvd

Vulners

Node

info.magnolia magnolia\-coreRange<6.2.12

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-46361
docs	www.docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.12.html
github	www.github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-46361-FreeMarker%20Bypass-Magnolia%20CMS
github	www.github.com/advisories/GHSA-m4hg-5p2m-fm5m

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Feb 2022 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS27.5

CVSS39.8

EPSS0.00293