CVE-2021-46361: Critical severity magnolia content management suite vulnerability
Published Feb 11, 2022
·Updated
An issue in the Freemark Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrictions and execute arbitrary code via a crafted FreeMarker payload.
Affected Software
1 affected component
Magnolia-cms Magnolia Cms<6.2.12
Event History
Feb 11, 2022
CVE Published
via MITRE·08:08 PM
Data Sourced
via MITRE·08:08 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-46361?
CVE-2021-46361 is considered a critical vulnerability due to its ability to allow arbitrary code execution.
2
How do I fix CVE-2021-46361?
To fix CVE-2021-46361, upgrade Magnolia CMS to version 6.2.12 or later.
3
What versions of Magnolia CMS are affected by CVE-2021-46361?
CVE-2021-46361 affects Magnolia CMS version 6.2.11 and earlier.
4
What type of attack does CVE-2021-46361 enable?
CVE-2021-46361 enables attackers to bypass security restrictions and execute arbitrary code.
5
Is there a workaround for CVE-2021-46361?
There are no known workarounds; upgrading to a patched version is the recommended action.