-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
The analysis focused on the changes made in the patch to understand which functions were involved in the vulnerability. The init() method and _executeModule() were identified as key because they relate to the order of operations that led to the CSRF vulnerability.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| intelliants/subrion | composer | >= 4.1, < 4.2.0 | 4.2.0 |
Ongoing coverage of React2Shell