Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-5543
7.5
HIGHCVSS v2
Published
January 20, 2017
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt cookie in a login request.
GitHub