{"id":"GHSA-2x28-c7j7-23gv","aliases":["CVE-2023-46947"],"title":"Subrion remote command execution vulnerability","description":"Subrion 4.2.1 has a remote command execution vulnerability in the backend.","severity":"high","score":7.2,"published":"2023-11-03T15:33:55.000Z","modified":"2024-02-16T08:25:04.070Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"intelliants/subrion","ranges":[{"events":[{"introduced":"0"},{"last_affected":"4.2.1"}],"type":"ECOSYSTEM"}],"versions":["v4.0.0","v4.0.1","v4.0.2","v4.0.3","v4.0.4","v4.0.5","v4.1.0","v4.1.1","v4.1.2","v4.1.3","v4.1.4","v4.1.5","v4.2.0","v4.2.1"],"fixed":[]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2023-46947","https://github.com/intelliants/subrion/issues/909"],"sources":[{"name":"OSV","id":"GHSA-2x28-c7j7-23gv","modified":"2024-02-16T08:25:04.070838Z","url":"https://osv.dev/vulnerability/GHSA-2x28-c7j7-23gv"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","score":7.2}]}