GitHub Advisoryadvisory · Packagist

GHSA-5mh2-82g9-72jv Subrion CMS CSRF Vulnerability

HIGH Published 2022-05-24 Modified 2023-09-28 Official page ↗

Aliases: CVE-2019-7357
Ecosystem: Packagist
Packages: intelliants/subrion
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses: CWE-352
Reviewed: 2023-07-18

Affected packages

• Packagist intelliants/subrion: <= 4.2.1 (no fix yet)

Description

Subrion CMS 4.2.1 has CSRF in `panel/modules/plugins/`. The attacker can remotely activate/deactivate the plugins.

Related

Alias · CVE (1)

CVE-2019-7357 Subrion CMS 4.2.1 has CSRF in panel/modules/plugins/. vulnerability

Weakness · CWE (1)

CWE-352 Cross-Site Request Forgery weakness

References