Описание
Deserialization of Untrusted Data in Magnolia CMS
A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file.
Пакеты
Наименование
info.magnolia:magnolia-core
maven
Затронутые версииВерсия исправления
< 6.2.4
6.2.4
Связанные уязвимости
CVSS3: 7.8
nvd
почти 4 года назад
A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file.