[MEDIUM] CVE-2022-42949 - Subsite weakens file permissions

PKSA-5xmn-hwt7-q7p4 CVE-2022-42949 GHSA-cx45-565q-6qx8

Affected package: silverstripe/subsites

Affected version: >=2.0.0,<2.6.1

Reported by:
GitHub, FriendsOfPHP/security-advisories