Packagist (Composer) package
silverstripe/cms
pkg:composer/silverstripe/cms
Vulnerabilities (12)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-37421 | — | >= 4.0.0, < 4.11.3 | 4.11.3 | Nov 23, 2022 | Silverstripe silverstripe/cms through 4.11.0 allows XSS. | ||
| CVE-2020-9311 | — | <= 4.5.0 | — | Jul 15, 2020 | In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can craft profile information which can lead to XSS for other users through specially crafted login form URLs. | ||
| CVE-2020-9309 | — | <= 4.5.0 | — | Jul 15, 2020 | Silverstripe CMS through 4.5 can be susceptible to script execution from malicious upload contents under allowed file extensions (for example HTML code in a TXT file). When these files are stored as protected or draft files, the MIME detection can cause browsers to execute the fi | ||
| CVE-2020-6164 | — | <= 4.5.0 | — | Jul 15, 2020 | In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can be used to disclose the fact that a domain is hosting a Silverstripe application. There is no disclosure of the specific version. The functionality on this URL p | ||
| CVE-2019-12204 | — | >= 4.4.0, < 4.4.4 | 4.4.4 | Sep 25, 2019 | In SilverStripe through 4.3.3, a missing warning about leaving install.php in a public webroot can lead to unauthenticated admin access. | ||
| CVE-2017-12849 | Med | 5.3 | < 3.5.5 | 3.5.5 | Oct 12, 2017 | Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x before 3.6.1 allows remote attackers to enumerate users via timing attacks. | |
| CVE-2017-14498 | Med | 6.1 | < 3.6.1 | 3.6.1 | Sep 15, 2017 | SilverStripe CMS before 3.6.1 has XSS via an SVG document that is mishandled by (1) the Insert Media option in the content editor or (2) an admin/assets/add pathname, as demonstrated by the admin/pages/edit/EditorToolbar/MediaForm/field/AssetUploadField/upload URI, aka issue SS-2 | |
| CVE-2017-5197 | Med | 6.1 | < 3.4.4 | 3.4.4 | Mar 6, 2017 | There is XSS in SilverStripe CMS before 3.4.4 and 3.5.x before 3.5.2. The attack vector is a page name. An example payload is a crafted JavaScript event handler within a malformed SVG element. | |
| CVE-2015-8606 | Med | 6.1 | < 3.1.16 | 3.1.16 | Apr 13, 2016 | Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe CMS & Framework before 3.1.16 and 3.2.x before 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Locale or (2) FailedLoginCount parameter to admin/security/EditForm/field/Members/ite | |
| CVE-2015-5062 | — | <= 3.1.13 | — | Jun 24, 2015 | Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the returnURL parameter to dev/build. | ||
| CVE-2011-4962 | — | >= 2.4.0, < 2.4.6 | 2.4.6 | Sep 17, 2012 | code/sitefeatures/PageCommentInterface.php in SilverStripe 2.4.x before 2.4.6 might allow remote attackers to execute arbitrary code via a crafted cookie in a user comment submission, which is not properly handled when it is deserialized. | ||
| CVE-2010-1593 | — | < 2.3.5 | 2.3.5 | Apr 28, 2010 | Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via (1) the CommenterURL parameter to PostCommentForm, and in the Forum module before 0.2.5 in SilverStripe before 2.3.5 allow remote att |
- CVE-2022-37421Nov 23, 2022affected >= 4.0.0, < 4.11.3fixed 4.11.3
Silverstripe silverstripe/cms through 4.11.0 allows XSS.
- CVE-2020-9311Jul 15, 2020affected <= 4.5.0
In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can craft profile information which can lead to XSS for other users through specially crafted login form URLs.
- CVE-2020-9309Jul 15, 2020affected <= 4.5.0
Silverstripe CMS through 4.5 can be susceptible to script execution from malicious upload contents under allowed file extensions (for example HTML code in a TXT file). When these files are stored as protected or draft files, the MIME detection can cause browsers to execute the fi
- CVE-2020-6164Jul 15, 2020affected <= 4.5.0
In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can be used to disclose the fact that a domain is hosting a Silverstripe application. There is no disclosure of the specific version. The functionality on this URL p
- CVE-2019-12204Sep 25, 2019affected >= 4.4.0, < 4.4.4fixed 4.4.4
In SilverStripe through 4.3.3, a missing warning about leaving install.php in a public webroot can lead to unauthenticated admin access.
- affected < 3.5.5fixed 3.5.5
Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x before 3.6.1 allows remote attackers to enumerate users via timing attacks.
- affected < 3.6.1fixed 3.6.1
SilverStripe CMS before 3.6.1 has XSS via an SVG document that is mishandled by (1) the Insert Media option in the content editor or (2) an admin/assets/add pathname, as demonstrated by the admin/pages/edit/EditorToolbar/MediaForm/field/AssetUploadField/upload URI, aka issue SS-2
- affected < 3.4.4fixed 3.4.4
There is XSS in SilverStripe CMS before 3.4.4 and 3.5.x before 3.5.2. The attack vector is a page name. An example payload is a crafted JavaScript event handler within a malformed SVG element.
- affected < 3.1.16fixed 3.1.16
Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe CMS & Framework before 3.1.16 and 3.2.x before 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Locale or (2) FailedLoginCount parameter to admin/security/EditForm/field/Members/ite
- CVE-2015-5062Jun 24, 2015affected <= 3.1.13
Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the returnURL parameter to dev/build.
- CVE-2011-4962Sep 17, 2012affected >= 2.4.0, < 2.4.6fixed 2.4.6
code/sitefeatures/PageCommentInterface.php in SilverStripe 2.4.x before 2.4.6 might allow remote attackers to execute arbitrary code via a crafted cookie in a user comment submission, which is not properly handled when it is deserialized.
- CVE-2010-1593Apr 28, 2010affected < 2.3.5fixed 2.3.5
Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via (1) the CommenterURL parameter to PostCommentForm, and in the Forum module before 0.2.5 in SilverStripe before 2.3.5 allow remote att