{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.2.1"}],"component":"intelliants/subrion","cve_ids":["CVE-2025-56556"],"ecosystem":"Packagist","epss":0.002,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-h8wv-vv58-468h","id":"tcs_01M5KF3H8DM9XD38D9163RBDSM","modified_at":"2025-11-27T08:55:05.183223Z","published_at":"2025-09-11T21:31:54Z","references":["https://osv.dev/vulnerability/GHSA-h8wv-vv58-468h","https://nvd.nist.gov/vuln/detail/CVE-2025-56556","https://github.com/intelliants/subrion/issues/913","https://github.com/intelliants/subrion"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-h8wv-vv58-468h","url":"https://osv.dev/vulnerability/GHSA-h8wv-vv58-468h"}],"summary":"Subrion CMS: Authenticated administrators are able to gain escalated access through Run SQL Query tool"}