CVE-2021-39458

Published: Sep 9, 2021Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Triggering an error page of the import process in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user has to alternate the files of a vaild file backup. This leads of leaking the database credentials in the environment variables.

Affected (1)

Products: Redaxo: Redaxo

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Redaxo Redaxo	Version 5.12.1

Related CWEs

Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (4)

https://github.com/evildrummer/CVE-2021-XYZ2

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/evildrummer/MyOwnCVEs/tree/main/CVE-2021-39458

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/evildrummer/CVE-2021-XYZ2

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://github.com/evildrummer/MyOwnCVEs/tree/main/CVE-2021-39458

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.