CVE-2021-46364
HIGHMagnolia CMS <6.2.3 - RCE
Title source: llmDescription
A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file.
Exploits (1)
References (2)
Scores
CVSS v3
7.8
EPSS
0.0100
EPSS Percentile
76.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Classification
CWE
CWE-502
Status
published
Affected Products (2)
magnolia-cms/magnolia_cms
< 6.2.4
info.magnolia/magnolia-core
< 6.2.4Maven
Timeline
Published
Feb 11, 2022
Tracked Since
Feb 18, 2026