CVE-2021-46365

CVE-2021-46365: Magnolia CMS의 안전하지 않은 XML 파싱 Magnolia v6.2.3 이하의 내보내기Export 기능에서 공격자가 조작된 XLF 파일을 통해 XML External Entity 공격을 실행할 수 있는 문제가 발견되었습니다. 공급업체 공개: 이 취약점에 대한 공급업체의 공개 및 수정 사항은 여기에서 확인할 수 있습니다. 요구사항: 이 취약점을 악용하기 위해서는: 유효한 사용자 자격 증명 개념 증명: 더 자세한 내용 및 익스플로잇 과정은 이 PDF에서 확인할 수 있습니다...

EUVD-2022-0796

Malicious code in bioql PyPI...

CVE-2021-46365

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute XML External Entity attacks via a crafted XLF file...

Xxe

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute XML External Entity attacks via a crafted XLF file...

CVE-2021-46365

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute XML External Entity attacks via a crafted XLF file...

CVE-2021-46365

CVE-2021-46365 affects Magnolia CMS v6.2.3 and earlier, where the Export function processes crafted XLF files enabling XML External Entity (XXE) attacks. The reported impact is high (CVSS 3.1: High) with local exploitability and potential high confidentiality/integrity/availability impact as per ...

CVE-2021-46365

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute XML External Entity attacks via a crafted XLF file...

CVE-2021-46365: Improper Restriction of XML External Entity Reference

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute XML External Entity attacks via a crafted XLF file...

PT-2022-12673

Name of the Vulnerable Software and Affected Versions Magnolia versions 6.2.3 and below Description An issue in the Export function of Magnolia allows attackers to execute arbitrary code via a crafted XLF file. This issue enables attackers to perform XML External Entity attacks. Recommendations F...