Deserialization of Untrusted Data in Magnolia CMS

ALTO 7.8CVE-2021-46364 · GHSA-pwr6-p3fh-grc2 · Published 11/02/2022 · updated 17/06/2026

En resumen

CVE-2021-46364 es una vulnerabilidad ALTO (CVSS 7.8) que afecta a info.magnolia:magnolia-core, magnolia cms (magnolia-cms).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.6%, mayor que el 75.4% de las vulnerabilidades.
Solución: actualizar a 6.2.4 o posterior.

Package	Affected versions	Patched versions
info.magnolia:magnolia-core Maven	`< 6.2.4`	`6.2.4`
magnolia cms magnolia-cms	`< 6.2.4`	`6.2.4`

A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file.

NVD description

A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Maven

< 6.2.4

6.2.4

< 6.2.4

6.2.4

Más vulnerabilidades de info.magnolia:magnolia-core

Ver todo →