CVE-2021-23262

Authenticated administrators may modify the main YAML configuration file and load a Java class resulting in RCE.

• https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120105
  Vendor Advisory
• https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2021120105
  Vendor Advisory