GHSA-g8j7-w673-4mjp

ghsaUSosv

Subrion CMS CSRF Vulnerability

view advisory published 2022-05-24Licence: CC-BY-4.0

Subrion CMS 4.1.5 (and possibly earlier versions) allow CSRF to change the administrator password via the `panel/members/edit/1` URI.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-21037US	high8.8	0.51% (44th)	—	2020-03-17
Subrion CMS 4.1.5 (and possibly earlier versions) allow CSRF to change the administrator password via the panel/members/edit/1 URI.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.