{"action":"Upgrade intelliants/subrion to 4.2.1 or later.","affected":[{"fixed":"4.2.1","introduced":"0"}],"component":"intelliants/subrion","cve_ids":["CVE-2017-18366"],"ecosystem":"Packagist","epss":0.0065,"exploited":false,"fixed_versions":["4.2.1"],"ghsa_id":"GHSA-c939-g732-48r8","id":"tcs_01M5KF0SSS926TVKH637682PXH","modified_at":"2024-02-16T08:04:57.465097Z","published_at":"2022-05-14T01:10:36Z","references":["https://osv.dev/vulnerability/GHSA-c939-g732-48r8","https://nvd.nist.gov/vuln/detail/CVE-2017-18366","https://github.com/intelliants/subrion/issues/477","https://github.com/intelliants/subrion/commit/8c08d7b92a4b7b5820a951d53c24844715439b73","https://github.com/intelliants/subrion"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-c939-g732-48r8","url":"https://osv.dev/vulnerability/GHSA-c939-g732-48r8"}],"summary":"Subrion CMS vulnerable to CSRF in blog/delete"}