CVE-2008-0701: Medium severity magnolia cms vulnerability
Published Feb 12, 2008
·Updated
ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via activation of a new item, possibly involving addition of arbitrary new content.
Affected Software
3 affected components
Magnolia CE=3.5.1
Magnolia CE=3.5.2
Magnolia CE=3.5.3
Event History
Feb 12, 2008
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0701?
CVE-2008-0701 has a medium severity rating of 5.
2
What impact does CVE-2008-0701 have on Magnolia CE?
CVE-2008-0701 allows remote attackers to potentially add arbitrary new content without permission during the importing process.
3
How do I fix CVE-2008-0701?
To mitigate CVE-2008-0701, upgrade Magnolia CE to version 3.5.4 or later where the permission check issue has been resolved.
4
Which versions of Magnolia CE are affected by CVE-2008-0701?
CVE-2008-0701 affects Magnolia CE versions prior to 3.5.4.
5
What is the attack vector for CVE-2008-0701?
The attack vector for CVE-2008-0701 is remote, as it allows attackers to exploit the vulnerability without authentication.