SilverStripe through 4.3.3 allows a Denial of Service on flush and development URL tools.
Published February 19, 2020.
Silverstripe Silverstripe