GitHub Advisoryadvisory · Packagist

GHSA-g54x-29xv-58h5 Remote code execution in Subrion

HIGH Published 2022-04-05 Modified 2022-04-15 Official page ↗
Aliases
CVE-2021-43464
Ecosystem
Packagist
Packages
intelliants/subrion
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Reviewed
2022-04-07

Affected packages

• Packagist intelliants/subrion: <= 4.2.1 (no fix yet)

Description

Subrion is an open source php content management system. A Remiote Code Execution (RCE) vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval().

Related

Alias · CVE (1)

  • CVE-2021-43464 A Remiote Code Execution (RCE) vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is… vulnerability

References