CVE-2008-0701: Magnolia CE

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

ActivationHandler in Magnolia CE 3.5.x before 3.5.4 does not check permissions during importing, which allows remote attackers to have an unknown impact via activation of a new item, possibly involving addition of arbitrary new content.

Affected products

• Magnolia CE: version 3.5.1 only; version 3.5.2 only; version 3.5.3 only

Published 2008-02-12. Last modified 2026-06-16.