CVE-2017-6068

Subrion CMS 4.0.5 has CSRF in admin/blocks/add/

published March 27, 2017

CVSS
—
EPSS
1%
Percentile
48.4
In the wild
Unconfirmed
What it is

Subrion CMS 4.0.5 has CSRF in admin/blocks/add/. The attacker can create any block, and can optionally insert XSS via the content parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00613 · 48.4th percentile
Published
2017-03-27T01:55Z
EPSS history
Timeline
  • 27 MAR 01:55Z
    Subrion CMS 4.0.5 has CSRF in admin/blocks/add/
    cvelistv5