CVE-2020-12469

Name of the Vulnerable Software and Affected Versions Subrion CMS versions prior to 4.2.1

Description The issue concerns PHP Object Injection, which can lead to file deletion. This occurs through the subpages value within a block to blocks/edit, where an attacker can inject malicious serialized data.

Recommendations For Subrion CMS versions prior to 4.2.1, update to a version that contains a fix for this issue to prevent PHP Object Injection and potential file deletion.