CVE-2021-23262

Impact

Authenticated administrators may modify the main YAML configuration file and load a Java class resulting in RCE.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120105
• https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120105