PT-2020-13129
CVE-2020-12469
·
تاريخ النشر
2020-04-29
·
تاريخ التحديث
2022-05-24
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Subrion CMS versions prior to 4.2.1
Description
The issue concerns PHP Object Injection, which can lead to file deletion. This occurs through the
subpages value within a block to blocks/edit, where an attacker can inject malicious serialized data.Recommendations
For Subrion CMS versions prior to 4.2.1, update to a version that contains a fix for this issue to prevent PHP Object Injection and potential file deletion.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾