CVE-2021-46364
1 advisory.
Maven/info.magnolia:magnolia-core CVE-2021-46364: high 7.8
Deserialization of Untrusted Data in Magnolia CMS
Action: Upgrade info.magnolia:magnolia-core to 6.2.4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.2.4 | - |
Fixed versions
| 6.2.4 |
Sources
- osv: GHSA-pwr6-p3fh-grc2
- https://nvd.nist.gov/vuln/detail/CVE-2021-46364
- https://docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.4.html#_security_advisory
- https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-46364-YAML%20Deserialization-Magnolia%20CMS
CVE-2021-46364 · published · modified · JSON