PatchTheCVEmagnolia cms vulnerabilities and fixes
Recent CVEs affecting magnolia cms, with upgrade or downgrade steps. 10 tracked.
Also searched as: magnoliacms.
magnolia cms has 10 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 9. Most recent: 2022-07-07. Highest priority: CVE-2021-46362 (score 67/100).
- CVE-2022-33098 MEDIUM 6.1 DOWNGRADE Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the Edit Contact
- CVE-2021-46366 HIGH 8.8 UPGRADE An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect
- CVE-2021-46365 HIGH 7.8 UPGRADE An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute XML External Entity a
- CVE-2021-46364 HIGH 7.8 UPGRADE A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrar
- CVE-2021-46363 HIGH 7.8 UPGRADE An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection att
- CVE-2021-46362 CRITICAL 9.8 UPGRADE A Server-Side Template Injection (SSTI) vulnerability in the Registration and Forgotten Password forms of Magn
- CVE-2021-46361 CRITICAL 9.8 UPGRADE An issue in the Freemark Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrict
- CVE-2021-25894 MEDIUM 6.1 UPGRADE Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the /magnoliaPu
- CVE-2021-25893 MEDIUM 5.4 UPGRADE Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the setText par
- CVE-2013-4621 CRITICAL 9.8 UPGRADE Magnolia CMS before 4.5.9 has multiple access bypass vulnerabilities
FAQ
How do I fix magnolia cms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is magnolia cms being exploited right now?
None of the tracked magnolia cms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which magnolia cms CVE should I patch first?
CVE-2021-46362 currently ranks highest (67/100): A Server-Side Template Injection (SSTI) vulnerability in the Registration and Forgotten Password forms of Magn.