p PatchFirst

CVE-2018-21037

CVE-2018-21037

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Subrion CMS 4.1.5 (and possibly earlier versions) allow CSRF to change the administrator password via the panel/members/edit/1 URI.

CVSS 8.8 · High · EPSS 0.5% · Fix available

Published
Updated

Stack: php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • intelliants/subrion Packagist

    Versions
    • v4.0.0
    • v4.0.1
    • v4.0.2
    • v4.0.3
    • v4.0.4
    • v4.0.5
    • v4.1.0
    • v4.1.1
    • v4.1.2
    • v4.1.3
    • v4.1.4
    • v4.1.5
    • v4.2.0
    Affected ranges
    • ECOSYSTEM: < 4.2.1

    Update to 4.2.1

Original sources

Check your server →