{"id":"CVE-2021-46364","details":"A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file.","aliases":["GHSA-pwr6-p3fh-grc2"],"modified":"2026-03-14T01:39:30.136011Z","published":"2022-02-11T21:15:11.853Z","references":[{"type":"ADVISORY","url":"https://docs.magnolia-cms.com/product-docs/6.2/Releases/Release-notes-for-Magnolia-CMS-6.2.4.html#_security_advisory"},{"type":"EVIDENCE","url":"https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-46364-YAML%20Deserialization-Magnolia%20CMS"}],"affected":[{"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-46364.json","unresolved_ranges":[{"events":[{"introduced":"0"},{"fixed":"6.2.4"}]}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}