CVE-2020-12469

admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection with resultant file deletion via serialized data in the subpages value within a block to blocks/edit...

CVE-2020-12469

Subrion CMS ≤ 4.2.1 is affected by a PHP Object Injection vulnerability in admin/blocks.php. The issue arises from serialized data in the subpages value when interacting with blocks/edit, enabling object injection and potentially deletion of files. The Red Hat and CVE records corroborate the same...