GitHub Advisoryadvisory · Maven

GHSA-m4hg-5p2m-fm5m Arbitrary code execution in Magnolia CMS

CRITICAL Published 2022-02-12 Modified 2022-02-23 Official page ↗
Aliases
CVE-2021-46361
Ecosystem
Maven
Packages
info.magnolia:magnolia-core
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Reviewed
2022-02-14

Affected packages

• Maven info.magnolia:magnolia-core: < 6.2.12 → fixed in 6.2.12

Description

An issue in the Freemark Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrictions and execute arbitrary code via a crafted FreeMarker payload.

Related

Alias · CVE (1)

  • CVE-2021-46361 An issue in the Freemark Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrictions and execute arbitrary… vulnerability

References