GHSA-9cc3-5w85-pxvx

ghsaUSosv

Cross Site Request Forgery in intelliants/subrion

view advisory published 2022-03-05Licence: CC-BY-4.0

Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfully create an arbitrary administrator user.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-18326US	high8.8	2.24% (83rd)	Exploit	2022-03-04
Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious…

references

External citations — patches, advisories, analysis.

https://github.com/hamm0nz/CVE-2020-18326WEB
https://github.com/intelliants/subrionPACKAGE
https://nvd.nist.gov/vuln/detail/CVE-2020-18326ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan