Lucene search

K
osvGoogleOSV:GHSA-4F4H-JGJP-3VFG
HistoryMay 24, 2022 - 5:16 p.m.

Subrion CMS CSV injection via Export Language

2022-05-2417:16:53
Google
osv.dev
7
subrion cms
csv injection
language export
software
phrases
languages

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

44.8%

Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/.

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

44.8%

Related for OSV:GHSA-4F4H-JGJP-3VFG