CVE-2020-12469

admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection (with resultant file deletion) via serialized data in the subpages value within a block to blocks/edit.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2020-04-29

Last modified

2024-08-04

Weaknesses

CWE-502

Affected products

• Subrion (Intelliants)

References

• https://github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/Insecure%20Deserialization/Subpages%20-%20…