CVE-2021-39458: Redaxo

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Triggering an error page of the import process in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user has to alternate the files of a vaild file backup. This leads of leaking the database credentials in the environment variables.

Affected products

• Redaxo Redaxo: version 5.12.1 only

Published 2021-09-09. Last modified 2026-06-17.