CVE-2021-39458

Publication date

2021-09-09 11:32:36

Family

mitre

State

PUBLISHED

Description

Triggering an error page of the import process in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user has to alternate the files of a vaild file backup. This leads of leaking the database credentials in the environment variables.