Executive brief
Remote code execution in Subrion
Affected products
- Packagist intelliants/subrion
Junglewise Threat Intelligence
CVE-2021-43464: Remote code execution in Subrion
CVE-2021-43464 · Severity: low · CVSS 3.1 · Published 2022-04-05
Technologies: intelliants/subrion (Packagist). Vendors: Packagist.
Related threats
- Intelliants Subrion CMS stored XSS in Blocks Endpoint
- Subrion CMS vulnerable to cross-site scripting
- Subrion CMS: Authenticated administrators are able to gain escalated access through Run SQL Query tool
- Subrion CMS vulnerable to Cross Site Scripting
- Withdrawn Advisory: Subrion CMS vulnerable to SQL Injection