CVE-2020-12468

描述

Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/.

受影響套件(1)

• Packagist/intelliants/subrion

CVSS 分數

參考連結(4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2020-12468
• PATCHhttps://github.com/intelliants/subrion
• WEBhttps://belong2yourself.github.io/vulnerabilities/docs/Subrion%20CMS/CSV%20Injection/readme
• WEBhttps://github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/CSV%20Injection