https://github.com/mbadanoiu/cve-2021-46365

CVE-2021-46365: Unsafe XML Parsing in Magnolia CMS
https://github.com/mbadanoiu/cve-2021-46365

0-day authenticated cve cve-2021-46365 cves xxe

Last synced: 2 days ago
JSON representation

CVE-2021-46365: Unsafe XML Parsing in Magnolia CMS

• Host: GitHub
• URL: https://github.com/mbadanoiu/cve-2021-46365
• Owner: mbadanoiu
• Created: 2024-02-13T20:52:49.000Z (9 months ago)
• Default Branch: main
• Last Pushed: 2024-02-13T21:00:35.000Z (9 months ago)
• Last Synced: 2024-02-13T23:23:41.872Z (9 months ago)
• Topics: 0-day, authenticated, cve, cve-2021-46365, cves, xxe
• Homepage:
• Size: 499 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# CVE-2021-46365: Unsafe XML Parsing in Magnolia CMS

An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute XML External Entity attacks via a crafted XLF file.

### Vendor Disclosure:

The vendor's disclosure and fix for this vulnerability can be found [here](https://docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.4.html#_security_advisory).

### Requirements:

This vulnerability requires:




- Valid user credentials

### Proof Of Concept:

More details and the exploitation process can be found in this [PDF](https://github.com/mbadanoiu/CVE-2021-46365/blob/main/Magnolia%20CMS%20-%20CVE-2021-46365.pdf).