High severityNVD Advisory· Published Feb 11, 2022· Updated Aug 4, 2024
CVE-2021-46364
CVE-2021-46364
Description
A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
info.magnolia:magnolia-coreMaven | < 6.2.4 | 6.2.4 |
Affected products
2- Magnolia/CMSdescription
Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-pwr6-p3fh-grc2ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2021-46364ghsaADVISORY
- docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.4.htmlghsax_refsource_MISCWEB
- github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-46364-YAML%20Deserialization-Magnolia%20CMSghsax_refsource_MISCWEB
News mentions
0No linked articles in our index yet.