{"action":"Upgrade intelliants/subrion to 4.2.1 or later.","affected":[{"fixed":"4.2.1","introduced":"0"}],"component":"intelliants/subrion","cve_ids":["CVE-2018-21037"],"ecosystem":"Packagist","epss":0.00513,"exploited":false,"fixed_versions":["4.2.1"],"ghsa_id":"GHSA-g8j7-w673-4mjp","id":"tcs_01M5KF2GDMFZ7WY27CXXEM1FMR","modified_at":"2024-02-16T08:07:20.846232Z","published_at":"2022-05-24T17:11:40Z","references":["https://osv.dev/vulnerability/GHSA-g8j7-w673-4mjp","https://nvd.nist.gov/vuln/detail/CVE-2018-21037","https://github.com/intelliants/subrion/issues/638","https://github.com/intelliants/subrion","https://github.com/intelliants/subrion/blob/c8aaeb04f44554e454be9763527a7be7fbe7bfd5/changelog.txt#L899"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-g8j7-w673-4mjp","url":"https://osv.dev/vulnerability/GHSA-g8j7-w673-4mjp"}],"summary":"Subrion CMS CSRF Vulnerability"}