Security Advisory

CVE-2020-12469

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-04-29 19:58:37
Last updated 2024-08-04 11:56:52
Assigner mitre
State PUBLISHED

Description

admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection (with resultant file deletion) via serialized data in the subpages value within a block to blocks/edit.