Authenticated administrators may modify the main YAML configuration file and load a Java class resulting in RCE.
References
Link | Resource |
---|---|
https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120105 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: crafter
Published: 2021-12-01T00:00:00
Updated: 2021-12-02T15:40:57
Reserved: 2021-01-08T00:00:00
Link: CVE-2021-23262
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-12-02T16:15:07.680
Modified: 2021-12-03T18:13:09.757
Link: CVE-2021-23262
JSON object: View
Redhat Information
No data.
CWE