Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.
Open advisories
5 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.
An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute arbitrary code via a crafted XLF file.
Recommended action: Upgrade to 6.2.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file.
Recommended action: Upgrade to 6.2.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute arbitrary code via a crafted CSV/XLS file.
Recommended action: Upgrade to 6.2.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
An issue in the Freemark Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrictions and execute arbitrary code via a crafted FreeMarker payload.
Recommended action: Upgrade to 6.2.12 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute force and exfiltrate users' credentials.
Recommended action: Upgrade to 6.2.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.