CVE-2021-46365

Description

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute XML External Entity attacks via a crafted XLF file.

Affected Platforms

Weakness Type

CWE-611

References

• https://docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnol…
• https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-46365-Unsafe%2…
• https://docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnol…
• https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-46365-Unsafe%2…