CVE-2021-46366

CVE-2021-46366 describes a critical vulnerability in Magnolia CMS versions 6.2.3 and below, specifically within its login page. This flaw allows attackers to combine an Open Redirect and Cross-Site Request Forgery (CSRF) to facilitate brute-force attacks and exfiltrate user credentials. With a CVSS score of 8.8 (HIGH), the vulnerability is network-exploitable with low attack complexity, requiring user interaction but leading to high confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.