CVE-2012-4773: Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attacke...

Security readout for executives and security teams

CVE-2012-4773 affects Subrion CMS versions before 2.2.3. An attacker could trick a logged-in administrator into submitting unwanted administrative actions, including adding an administrator account or modifying sensitive information. The risk is highest where administrators use the CMS through a browser while reachable attacker-controlled content can trigger requests. Exposure is limited to organizations running Subrion CMS before 2.2.3, especially installations with active administrator sessions and reachable administrative endpoints. The bundle does not identify affected CPEs or specific deployment platforms. Prioritize remediation if Subrion CMS is still in use. The issue can enable unauthorized administrative changes through a logged-in admin, but the bundle provides no evidence of current exploitation. Mitigation focus: Upgrade Subrion CMS to version 2.2.3 or later where applicable.; Review current Subrion vendor guidance for any remaining supported upgrade path.; Restrict administrator access to trusted networks or VPN where feasible..

Prepared

Jun 24, 2026, 19:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.