{"action":"Upgrade intelliants/subrion to 4.2.2 or later.","affected":[{"fixed":"4.2.2","introduced":"0"}],"component":"intelliants/subrion","cve_ids":["CVE-2018-19422"],"ecosystem":"Packagist","exploited":false,"fixed_versions":["4.2.2"],"ghsa_id":"GHSA-73xj-v6gc-g5p5","id":"tcs_01M5KEXN9GFEEKFHT7DSS9FP90","modified_at":"2024-02-16T08:17:23.422377Z","published_at":"2022-05-13T01:10:00Z","references":["https://osv.dev/vulnerability/GHSA-73xj-v6gc-g5p5","https://nvd.nist.gov/vuln/detail/CVE-2018-19422","https://github.com/intelliants/subrion/issues/801","https://github.com/intelliants/subrion/commit/74359bcfaea424edda6d782a8ac25397c55972ab","http://packetstormsecurity.com/files/162591/Subrion-CMS-4.2.1-Shell-Upload.html","http://packetstormsecurity.com/files/173998/Intelliants-Subrion-CMS-4.2.1-Remote-Code-Execution.html"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-73xj-v6gc-g5p5","url":"https://osv.dev/vulnerability/GHSA-73xj-v6gc-g5p5"}],"summary":"Subrion CMS RCE Vulnerability"}