CVE-2012-4773

CVE-2012-4773 describes multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Subrion CMS versions prior to 2.2.3. This flaw allows remote attackers to hijack an administrator's authenticated session, enabling them to perform unauthorized actions such as adding, deleting, or modifying sensitive information, including creating new administrator accounts. With a CVSS score of 6.8, this vulnerability is of medium severity, requiring medium attack complexity but potentially leading to partial confidentiality, integrity, and availability impacts. While not listed on the KEV catalog, exploit code is publicly available on ExploitDB, demonstrating the ease of exploitation, though there is no evidence of active exploitation or significant community discussion.