CVE-2025-56556

Katalog CVE

CVSS 3.8 · Low EPSS 0,20%

Kerentanan Authorization Bypass Through User-Controlled SQL Primary Key pada intelliants subrion cms. Skor CVSS 3.1 3.8 (Low) menurut CISA ADP.

Deskripsi (NVD)

An issue was discovered in Subrion CMS 4.2.1, allowing authenticated adminitrators or moderators with access to the built-in Run SQL Query feature under the SQL Tool admin panel - to gain escalated privileges in the context of the SQL query tool.

Rincian

Terbit di NVD

11 September 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.8 (Low), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-566: Authorization Bypass Through User-Controlled SQL Primary Key

EPSS (30 hari)

0,20% peluang dieksploitasi; lebih tinggi dari 9,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/intelliants/subrion/issues/913 exploit · issue tracking · advisory pihak ketiga