Filter
AND
Software
composer/silverstripe/adminNo permission checks for editing/deleting records with CSV import form
4.3
First published (updated )
composer/silverstripe/frameworkRecord titles for restricted records can be viewed if exposed by GridFieldAddExistingAutocompleter
4.3
First published (updated )
composer/silverstripe/graphqlSilverstripe GraqhQL's view permissions are bypassed for paginated lists of ORM data
5.3
First published (updated )
composer/silverstripe/frameworkSilverstripe Framework has open redirect vulnerability on CMSSecurity relogin screen
6.1
First published (updated )
composer/silverstripe/frameworkSilverstripe Framework has missing permission check of canView in GridFieldPrintButton
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Silverstripe silverstripeCVE-2022-24444: Hybridsessions does not expire session id on logout
6.5
First published (updated )
composer/silverstripe/assetsCVE-2022-29858: Unpublished, protected files can be published via shortcode
4.3
First published (updated )
composer/silverstripe/frameworkCVE-2021-41559: Quadratic blowup in Convert::xml2array()
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Silverstripe Silverstripe-omnipayFailed payment recorded has completed in silverstripe/silverstripe-omnipay
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/silverstripe/graphqlCVE-2020-26136 GraphQL doesn't honour MFA when using basic auth
6.5
First published (updated )
composer/silverstripe/graphqlCVE-2021-28661 Default GraphQL permission checker not inherited by query subclass
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/silverstripe/frameworkCVE-2019-19326: Web Cache Poisoning through HTTPRequestBuilder
5.9
First published (updated )
Silverstripe silverstripeCVE-2020-6165: Limited queries break CanViewPermissionChecker
5.3
First published (updated )
composer/silverstripe/frameworkXSS, OS Command Injection
6.1
First published (updated )
composer/silverstripe/frameworkCVE-2019-14273: Broken Access control on files
5.3
First published (updated )
composer/silverstripe/frameworkCVE-2019-12203: Session fixation in "change password" form
6.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.