CVE-2017-6002

Subrion CMS 4.0.5.10 has CSRF in admin/blog/add/

published March 27, 2017

CVSS
—
EPSS
0%
Percentile
37.8
In the wild
Unconfirmed
What it is

Subrion CMS 4.0.5.10 has CSRF in admin/blog/add/. The attacker can add any blog entry, and can optionally insert XSS into that entry via the body parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00449 · 37.8th percentile
Published
2017-03-27T01:55Z
EPSS history
Timeline
  • 27 MAR 01:55Z
    Subrion CMS 4.0.5.10 has CSRF in admin/blog/add/
    cvelistv5