Description
Subrion 4.2.1 is vulnerable to Improper Access control because user groups not having access to the Admin panel are able to access it (but not perform actions) if the Guests user group has access to the Admin panel.
References (1)
Core 1
Core References
Third Party Advisory x_refsource_misc
https://github.com/intelliants/subrion/issues/762
Scores
CVSS v3
6.5
EPSS
0.0100
EPSS Percentile
58.3%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-269
Status
published
Products (1)
subrion/subrion_cms
4.2.1
Published
Aug 02, 2018
Tracked Since
Feb 18, 2026