CVE-2020-12468 - Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language

HIGH

Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language

Published Apr 29, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.86%

Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://belong2yourself.github.io/vulnerabilities/docs/Subrion%20CMS/CSV%20Injection/readme
https://github.com/advisories/GHSA-4f4h-jgjp-3vfg		Advisory
https://github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/CSV%20Injection		x_refsource_MISCExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-12468