CVE-2018-16327

Description

There is Stored XSS in Subrion 4.2.1 via the admin panel URL configuration.

How to fix CVE-2018-16327

No fixed version has been published yet. Mitigate by removing the affected package or applying upstream guidance from the references below.

• Packagist/intelliants/subrion—no fix listed

Is CVE-2018-16327 being exploited?

Low — EPSS is 0.2%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

CVSS scores

References (4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2018-16327
• PATCHgithub.com/intelliants/subrion
• WEBgithub.com/intelliants/subrion/commit/ec8e6e8984eeebfaf0d8022f4c07aa508624ee18
• WEBgithub.com/intelliants/subrion/issues/771