Silverstripe
by Silverstripe
Source repositories
CVEs (71)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-14273 | Med | 0.35 | 5.3 | 0.01 | Sep 26, 2019 | In SilverStripe assets 4.0, there is broken access control on files. | ||
| CVE-2019-14272 | Med | 0.35 | 5.4 | 0.01 | Sep 26, 2019 | In SilverStripe asset-admin 4.0, there is XSS in file titles managed through the CMS. | ||
| CVE-2019-12245 | Med | 0.35 | 5.3 | 0.01 | Sep 25, 2019 | SilverStripe through 4.3.3 has incorrect access control for protected files uploaded via Upload::loadIntoFile(). An attacker may be able to guess a filename in silverstripe/assets via the AssetControlExtension. | ||
| CVE-2017-12849 | Med | 0.35 | 5.3 | 0.01 | Oct 12, 2017 | Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x before 3.6.1 allows remote attackers to enumerate users via timing attacks. | ||
| CVE-2023-44401 | Med | 0.34 | 5.3 | 0.00 | Jan 23, 2024 | The Silverstripe CMS GraphQL Server serves Silverstripe data as GraphQL representations. In versions 4.0.0 prior to 4.3.7 and 5.0.0 prior to 5.1.3, `canView` permission checks are bypassed for ORM data in paginated GraphQL query results where the total number of records is… | ||
| CVE-2019-19325 | Med | 0.33 | 6.1 | 0.01 | Feb 17, 2020 | SilverStripe through 4.4.x before 4.4.5 and 4.5.x before 4.5.2 allows Reflected XSS on the login form and custom forms. Silverstripe Forms allow malicious HTML or JavaScript to be inserted through non-scalar FormField attributes, which allows performing XSS (Cross-Site… | ||
| CVE-2019-12205 | Med | 0.33 | 6.1 | 0.01 | Sep 25, 2019 | SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS. | ||
| CVE-2017-14498 | Med | 0.33 | 6.1 | 0.01 | Sep 15, 2017 | SilverStripe CMS before 3.6.1 has XSS via an SVG document that is mishandled by (1) the Insert Media option in the content editor or (2) an admin/assets/add pathname, as demonstrated by the admin/pages/edit/EditorToolbar/MediaForm/field/AssetUploadField/upload URI, aka issue… | ||
| CVE-2020-25817 | Med | 0.31 | 4.8 | 0.01 | Jun 8, 2021 | SilverStripe through 4.6.0-rc1 has an XXE Vulnerability in CSSContentParser. A developer utility meant for parsing HTML within unit tests can be vulnerable to XML External Entity (XXE) attacks. When this developer utility is misused for purposes involving external or user… | ||
| CVE-2019-19326 | Med | 0.31 | 5.9 | 0.01 | Jul 15, 2020 | Silverstripe CMS sites through 4.4.4 which have opted into HTTP Cache Headers on responses served by the framework's HTTP layer can be vulnerable to web cache poisoning. Through modifying the X-Original-Url and X-HTTP-Method-Override headers, responses with malicious HTTP… | ||
| CVE-2026-54717 | Med | 0.28 | 5.4 | 0.00 | Aug 6, 2026 | Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting when viewed using the page list view, because page titles are rendered into the breadcrumb trail without being escaped. This issue is… | ||
| CVE-2020-6165 | Med | 0.28 | 5.3 | 0.01 | Jul 15, 2020 | SilverStripe 4.5.0 allows attackers to read certain records that should not have been placed into a result set. This affects silverstripe/recipe-cms. The automatic permission-checking mechanism in the silverstripe/graphql module does not provide complete protection against lists… | ||
| CVE-2024-29885 | Med | 0.21 | 4.3 | 0.00 | Jul 17, 2024 | silverstripe/reports is an API for creating backend reports in the Silverstripe Framework. In affected versions reports can be accessed by their direct URL by any user who has access to view the reports admin section, even if the `canView()` method for that report returns… | ||
| CVE-2023-49783 | Med | 0.21 | 4.3 | 0.00 | Jan 23, 2024 | Silverstripe Admin provides a basic management interface for the Silverstripe Framework. In versions on the 1.x branch prior to 1.13.19 and on the 2.x branch prior to 2.1.8, users who don't have edit or delete permissions for records exposed in a `ModelAdmin` can still edit or… | ||
| CVE-2019-12246 | Med | 0.21 | 4.3 | 0.01 | Feb 19, 2020 | SilverStripe through 4.3.3 allows a Denial of Service on flush and development URL tools. | ||
| CVE-2019-12617 | Low | 0.18 | 2.7 | 0.01 | Sep 26, 2019 | In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution. | ||
| CVE-2022-29254 | Low | 0.17 | 3.7 | 0.01 | Jun 9, 2022 | silverstripe-omnipay is a SilverStripe integration with Omnipay PHP payments library. For a subset of Omnipay gateways (those that use intermediary states like `isNotification()` or `isRedirect()`), if the payment identifier or success URL is exposed it is possible for payments… | ||
| CVE-2021-28661 | Med | 0.00 | 4.3 | 0.01 | Oct 7, 2021 | Default SilverStripe GraphQL Server (aka silverstripe/graphql) 3.x through 3.4.1 permission checker not inherited by query subclass. | ||
| CVE-2015-5063 | 0.00 | — | 0.02 | Jun 24, 2015 | Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe CMS & Framework 3.1.13 allow remote attackers to inject arbitrary web script or HTML via the (1) admin_username or (2) admin_password parameter to install.php. | |||
| CVE-2015-5062 | 0.00 | — | 0.02 | Jun 24, 2015 | Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the returnURL parameter to dev/build. |
- risk 0.35cvss 5.3epss 0.01
In SilverStripe assets 4.0, there is broken access control on files.
- risk 0.35cvss 5.4epss 0.01
In SilverStripe asset-admin 4.0, there is XSS in file titles managed through the CMS.
- risk 0.35cvss 5.3epss 0.01
SilverStripe through 4.3.3 has incorrect access control for protected files uploaded via Upload::loadIntoFile(). An attacker may be able to guess a filename in silverstripe/assets via the AssetControlExtension.
- risk 0.35cvss 5.3epss 0.01
Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x before 3.6.1 allows remote attackers to enumerate users via timing attacks.
- risk 0.34cvss 5.3epss 0.00
The Silverstripe CMS GraphQL Server serves Silverstripe data as GraphQL representations. In versions 4.0.0 prior to 4.3.7 and 5.0.0 prior to 5.1.3, `canView` permission checks are bypassed for ORM data in paginated GraphQL query results where the total number of records is…
- risk 0.33cvss 6.1epss 0.01
SilverStripe through 4.4.x before 4.4.5 and 4.5.x before 4.5.2 allows Reflected XSS on the login form and custom forms. Silverstripe Forms allow malicious HTML or JavaScript to be inserted through non-scalar FormField attributes, which allows performing XSS (Cross-Site…
- risk 0.33cvss 6.1epss 0.01
SilverStripe through 4.3.3 has Flash Clipboard Reflected XSS.
- risk 0.33cvss 6.1epss 0.01
SilverStripe CMS before 3.6.1 has XSS via an SVG document that is mishandled by (1) the Insert Media option in the content editor or (2) an admin/assets/add pathname, as demonstrated by the admin/pages/edit/EditorToolbar/MediaForm/field/AssetUploadField/upload URI, aka issue…
- risk 0.31cvss 4.8epss 0.01
SilverStripe through 4.6.0-rc1 has an XXE Vulnerability in CSSContentParser. A developer utility meant for parsing HTML within unit tests can be vulnerable to XML External Entity (XXE) attacks. When this developer utility is misused for purposes involving external or user…
- risk 0.31cvss 5.9epss 0.01
Silverstripe CMS sites through 4.4.4 which have opted into HTTP Cache Headers on responses served by the framework's HTTP layer can be vulnerable to web cache poisoning. Through modifying the X-Original-Url and X-HTTP-Method-Override headers, responses with malicious HTTP…
- risk 0.28cvss 5.4epss 0.00
Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting when viewed using the page list view, because page titles are rendered into the breadcrumb trail without being escaped. This issue is…
- risk 0.28cvss 5.3epss 0.01
SilverStripe 4.5.0 allows attackers to read certain records that should not have been placed into a result set. This affects silverstripe/recipe-cms. The automatic permission-checking mechanism in the silverstripe/graphql module does not provide complete protection against lists…
- risk 0.21cvss 4.3epss 0.00
silverstripe/reports is an API for creating backend reports in the Silverstripe Framework. In affected versions reports can be accessed by their direct URL by any user who has access to view the reports admin section, even if the `canView()` method for that report returns…
- risk 0.21cvss 4.3epss 0.00
Silverstripe Admin provides a basic management interface for the Silverstripe Framework. In versions on the 1.x branch prior to 1.13.19 and on the 2.x branch prior to 2.1.8, users who don't have edit or delete permissions for records exposed in a `ModelAdmin` can still edit or…
- risk 0.21cvss 4.3epss 0.01
SilverStripe through 4.3.3 allows a Denial of Service on flush and development URL tools.
- risk 0.18cvss 2.7epss 0.01
In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution.
- risk 0.17cvss 3.7epss 0.01
silverstripe-omnipay is a SilverStripe integration with Omnipay PHP payments library. For a subset of Omnipay gateways (those that use intermediary states like `isNotification()` or `isRedirect()`), if the payment identifier or success URL is exposed it is possible for payments…
- risk 0.00cvss 4.3epss 0.01
Default SilverStripe GraphQL Server (aka silverstripe/graphql) 3.x through 3.4.1 permission checker not inherited by query subclass.
- CVE-2015-5063Jun 24, 2015risk 0.00cvss —epss 0.02
Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe CMS & Framework 3.1.13 allow remote attackers to inject arbitrary web script or HTML via the (1) admin_username or (2) admin_password parameter to install.php.
- CVE-2015-5062Jun 24, 2015risk 0.00cvss —epss 0.02
Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the returnURL parameter to dev/build.
Page 2 of 4