silverstripe/framework Security Advisories for 4.0.0-rc1 (40)
-
[MEDIUM] CVE-2023-48714 Record titles for restricted records can be viewed if exposed by GridFieldAddExistingAutocompleter
PKSA-vcdc-4796-kn58 CVE-2023-48714 GHSA-qm2j-qvq3-j29v
Affected version: >=3.0.0,<4.0.0|>=4.0.0,<4.13.39|>=5.0.0,<5.1.11
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[LOW] CVE-2023-32302 - Members with no password can be created and bypass custom login forms
PKSA-2t2m-vnwy-55q7 CVE-2023-32302 GHSA-36xx-7vf6-7mv3
Affected version: >=3.0.0,<4.13.14|>=5.0.0,<5.0.13
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[MEDIUM] CVE-2023-22729 - Open redirect vulnerability on CMSSecurity relogin screen
PKSA-hkbw-7cv6-kp2b CVE-2023-22729 GHSA-fw84-xgm8-9jmv
Affected version: >=4.0.0,<4.12.5
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[MEDIUM] CVE-2023-22728 - Missing permission check in GridFieldPrintButton
PKSA-r31r-w74j-z58p CVE-2023-22728 GHSA-jh3w-6jp2-vqqm
Affected version: >=4.0.0,<4.12.5
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[MEDIUM] CVE-2021-41559: Quadratic blowup in Convert::xml2array()
PKSA-9b8c-khwh-k6t3 CVE-2021-41559 GHSA-9fmg-89fx-r33w
Affected version: >=4.0.0,<4.10.9
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[MEDIUM] CVE-2022-25238: Stored XSS via HTML fields
PKSA-pwy1-2c1j-9m7p CVE-2022-25238 GHSA-jx34-gqqq-r6gm
Affected version: >=4.0.0,<4.10.9
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[MEDIUM] CVE-2022-28803: Stored XSS in link tags added via XHR
PKSA-d1c8-bxwg-9sbf CVE-2022-28803 GHSA-rppc-655v-7j3c
Affected version: >=4.0.0,<4.10.9
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[MEDIUM] SilverStripe XXE Vulnerability in CSSContentParser
PKSA-b5cb-66pw-rz2d CVE-2020-25817 GHSA-3vjc-5x79-m9r8
Affected version: >=4.0.0,<4.7.4
Reported by:
GitHub -
[HIGH] SilverStripe Folders migrated from 3.x may be unsafe to upload to
PKSA-b4jh-m6fk-qfqf CVE-2020-9280 GHSA-592m-4533-rxq9
Affected version: >=4.0.0,<4.4.6
Reported by:
GitHub -
[MEDIUM] SilverStripe CSV Excel Macro Injection
PKSA-4npp-z2k1-kdtx CVE-2017-18049 GHSA-2jvj-mhf2-g99w
Affected version: >=4.0.0,<4.0.1|>=3.6.0,<3.6.3|<3.5.6
Reported by:
GitHub -
[MEDIUM] Business Logic Errors in SilverStripe Framework
PKSA-7j38-hj68-r82v CVE-2022-0227 GHSA-32m2-9f76-4gv8
Affected version: <4.10.1
Reported by:
GitHub -
[MEDIUM] CVE-2022-37430 - Stored XSS using uppercase characters in HTMLEditor
PKSA-vhcz-xnb3-24gr CVE-2022-37430 GHSA-qw4w-vq8v-2wcv
Affected version: >=4.0.0,<4.11.13
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[HIGH] CVE-2022-38148 - Blind SQL Injection via GridFieldSortableHeader
PKSA-66v9-dz78-mbvh CVE-2022-38148 GHSA-rr8h-f97q-8p9c
Affected version: >=4.0.0,<4.10.11|>=4.11.0,<4.11.14
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[MEDIUM] CVE-2022-38462 - Reflected XSS in querystring parameters
PKSA-w2s3-shwy-3fdb CVE-2022-38462 GHSA-vvxf-r4vm-2vm6
Affected version: >=4.0.0,<4.11.13
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[MEDIUM] CVE-2022-38724 - XSS in shortcodes
PKSA-nv1s-bg97-dttr CVE-2022-38724 GHSA-9cx2-hj6m-fv58
Affected version: >=4.0.0,<4.11.13
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[MEDIUM] CVE-2022-37429 - Stored XSS using HTMLEditor
PKSA-6c76-jv2c-jdb2 CVE-2022-37429 GHSA-wc6r-4ggc-79w5
Affected version: >=4.0.0,<4.11.13
Reported by:
GitHub, FriendsOfPHP/security-advisories -
CVE-2021-25817 XXE: Vulnerability in CSSContentParser
PKSA-pkf7-4y19-7jgw CVE-2021-25817
Affected version: >=4.0.0,<4.7.4
Reported by:
FriendsOfPHP/security-advisories -
[MEDIUM] CVE-2020-26138 FormField: with square brackets in field name skips validation
PKSA-pq7g-1pwh-dw3n CVE-2020-26138 GHSA-7mv4-4xpg-xq44
Affected version: >=3.0.0,<4.0.0|>=4.0.0,<4.7.4
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[HIGH] CVE-2020-6164: Information disclosure on /interactive URL path
PKSA-zhcm-grw1-sw1m CVE-2020-6164 GHSA-gm5x-hpmw-xpxg
Affected version: >=4.0.0,<4.4.7|>=4.5.0,<4.5.4
Reported by:
GitHub, FriendsOfPHP/security-advisories -
CVE-2019-19326: Web Cache Poisoning through HTTPRequestBuilder
PKSA-75gp-x5bj-hcwc CVE-2019-19326
Affected version: >=4.0.0,<4.4.7|>=4.5.0,<4.5.4|>=3.0.0,<3.7.5
Reported by:
FriendsOfPHP/security-advisories -
[MEDIUM] CVE-2019-19325: XSS through non-scalar FormField attributes
PKSA-cttv-q8kk-m71w CVE-2019-19325 GHSA-qvrv-2x7x-78x2
Affected version: >=4.0.0,<4.4.5|>=4.5.0,<4.5.2
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[MEDIUM] Lack of access control on upoaded files
PKSA-5yvt-vswv-zn54 CVE-2019-12245 GHSA-jvx5-rm6q-gx7p
Affected version: >=4.4.0,<4.4.4|>=4.0.0,<4.3.6|>=3.7.0,<3.7.4|<3.6.8
Reported by:
GitHub -
[MEDIUM] CVE-2019-14273: Broken Access control on files
PKSA-g9hg-jbs3-qz4m CVE-2019-14273 GHSA-43jj-2rwc-2m3f
Affected version: >=4.0.0,<4.3.5|>=4.4.0,<4.4.4
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[MEDIUM] CVE-2019-14272: XSS in file titles managed through the CMS
PKSA-qgy1-mwbw-7ywr CVE-2019-14272 GHSA-jgw2-f5mx-rg7h
Affected version: >=4.0.0,<4.3.5|>=4.4.0,<4.4.4
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[MEDIUM] CVE-2019-16409: Secureassets and versionedfiles modules can expose versions of protected files
PKSA-wp9q-nw9g-sv7t CVE-2019-16409 GHSA-xm6j-x342-gwq9
Affected version: >=4.0.0,<4.3.5|>=4.4.0,<4.4.4
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[MEDIUM] CVE-2019-12203: Session fixation in "change password" form
PKSA-wh2k-pccc-jn5p CVE-2019-12203 GHSA-w7r7-r8r9-vrg2
Affected version: >=3.6.0,<3.6.8|>=3.7.0,<3.7.4|>=4.0.0,<4.3.5|>=4.4.0,<4.4.4
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[MEDIUM] CVE-2019-12246: Denial of Service on flush and development URL tools
PKSA-9415-sntm-q9m8 CVE-2019-12246 GHSA-5fr8-xhqq-4p3q
Affected version: >=4.0.0,<4.4.0|>=4.1.0,<4.4.0|>=4.2.0,<4.4.0|>=4.3.0,<4.4.0
Reported by:
GitHub, FriendsOfPHP/security-advisories -
[CRITICAL] CVE-2019-5715: Reflected SQL Injection through Form and DataObject
PKSA-sn55-3v1d-5xkw CVE-2019-5715 GHSA-wvfw-w3x6-g526
Affected version: >=3.0.0,<3.6.7|>=3.7.0,<3.7.3|>=4.0.0,<4.0.7|>=4.1.0,<4.1.5|>=4.2.0,<4.2.4|>=4.3.0,<4.3.1
Reported by:
GitHub, FriendsOfPHP/security-advisories -
SS-2018-020: Potential SQL vulnerability in PostgreSQL database connector
Affected version: >=4.0.0,<4.0.6|>=4.1.0,<4.1.4|>=4.2.0,<4.2.3
Reported by:
FriendsOfPHP/security-advisories -
SS-2018-019: Possible denial of service attack vector when flushing
Affected version: >=4.0.0,<4.0.5|>=4.1.0,<4.1.3|>=4.2.0,<4.2.2
Reported by:
FriendsOfPHP/security-advisories -
SS-2018-018: Database credentials disclosure during connection failure
Affected version: >=3.7.0,<3.7.1|>=4.0.0,<4.0.5|>=4.1.0,<4.1.3|>=4.2.0,<4.2.2
Reported by:
FriendsOfPHP/security-advisories -
SS-2018-010: Member disclosure in login form
Affected version: >=4.0.0,<4.0.4|>=4.1.0,<4.1.1
Reported by:
FriendsOfPHP/security-advisories -
SS-2018-008: BackURL validation bypass with malformed URLs
Affected version: >=4.0.0,<4.0.4|>=4.1.0,<4.1.1
Reported by:
FriendsOfPHP/security-advisories -
SS-2018-012: Uploaded PHP script execution in assets
Affected version: >=4.0.0,<4.0.4|>=4.1.0,<4.1.1
Reported by:
FriendsOfPHP/security-advisories -
SS-2018-005: isDev and isTest unguarded
Affected version: >=4.0.0,<4.0.4|>=4.1.0,<4.1.1
Reported by:
FriendsOfPHP/security-advisories -
SS-2018-001: Privilege Escalation Risk in Member Edit form
Affected version: >=3.5.7,<3.5.8|>=3.6.0,<3.6.6|>=4.0.0,<4.0.4|>=4.1.0,<4.1.1
Reported by:
FriendsOfPHP/security-advisories -
SS-2017-010: install.php discloses sensitive data by pre-populating DB credential forms
Affected version: >=4.0.0,<4.0.1
Reported by:
FriendsOfPHP/security-advisories -
SS-2017-009: Users inadvertently passing sensitive data to LoginAttempt
Affected version: >=3.5.0,<3.5.6|>=3.6.0,<3.6.3|>=4.0.0,<4.0.1
Reported by:
FriendsOfPHP/security-advisories -
SS-2017-008: SQL injection in full text search of SilverStripe 4
Affected version: >=3.5.0,<3.5.6|>=3.6.0,<3.6.3|>=4.0.0,<4.0.1
Reported by:
FriendsOfPHP/security-advisories -
SS-2017-007: CSV Excel Macro Injection
Affected version: >=3.5.0,<3.5.6|>=3.6.0,<3.6.3|>=4.0.0,<4.0.1
Reported by:
FriendsOfPHP/security-advisories