CVE-2021-39458

6.5 mediumEPSS 1.2%

Medium (6.5) in redaxo redaxo. EPSS 1.2% chance of exploitation in the next 30 days.

Triggering an error page of the import process in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user has to alternate the files of a vaild file backup. This leads of leaking the database credentials in the environment variables.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-209
Published: 2021-09-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redaxo:redaxo

References

https://github.com/evildrummer/CVE-2021-XYZ2
https://github.com/evildrummer/MyOwnCVEs/tree/main/CVE-2021-39458
https://github.com/evildrummer/CVE-2021-XYZ2
https://github.com/evildrummer/MyOwnCVEs/tree/main/CVE-2021-39458

Check your stack JSON