CVE-2021-46363: Critical severity magnolia content management suite vulnerability
Published Feb 11, 2022
·Updated
An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported files with Microsoft Excel.
Affected Software
1 affected component
Magnolia-cms Magnolia Cms<6.2.4
Event History
Feb 11, 2022
CVE Published
via MITRE·08:08 PM
Data Sourced
via MITRE·08:08 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-46363?
CVE-2021-46363 is rated as a critical vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2021-46363?
To mitigate CVE-2021-46363, upgrade Magnolia CMS to version 6.2.4 or later.
3
What types of attacks can be performed using CVE-2021-46363?
CVE-2021-46363 allows attackers to perform Formula Injection attacks via specially crafted CSV or XLS files.
4
Which versions of Magnolia CMS are affected by CVE-2021-46363?
CVE-2021-46363 affects Magnolia CMS version 6.2.3 and below.
5
What impact does CVE-2021-46363 have on users?
Users opening exported files in Microsoft Excel may unintentionally execute malicious code as a result of CVE-2021-46363.