← Database

CVE-2021-46366

HIGH CVSS: 8.8 Published: 2022-02-11 Modified: 2026-06-17

Description

An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute force and exfiltrate users' credentials.

Affected Platforms

Magnolia-Cms Magnolia Cms

Weakness Type

CWE-352, CWE-601

References