~ / search / GHSA-5mh2-82g9-72jv

GHSA-5mh2-82g9-72jv

Subrion CMS CSRF Vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2019-7357

Packages

EcosystemPackageAffectedFixed in
Packagist intelliants/subrion <= 4.2.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Subrion CMS 4.2.1 has CSRF in `panel/modules/plugins/`. The attacker can remotely activate/deactivate the plugins.

References

External links from the advisory. They lead to third-party sites.