Skip to content
OpenAdvisories

Package · Packagist

silverstripe/framework

93 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    GHSA-8v6m-7f5v-hhx6

    Silverstripe Brute force bypass on default admin

    Default Administrator accounts were not subject to the same brute force protection afforded to other Member accounts. Failed login counts were not logged for default admins resulting in unlimited attempts on the default admin username and password.

    silverstripe/framework Packagist
  • Critical 9.8
    CVE-2019-12204

    Missing warning can lead to unauthenticated admin access in SilverStripe

    In SilverStripe through 4.3.3, a missing warning about leaving install.php in a public webroot can lead to unauthenticated admin access.

    silverstripe/framework silverstripe/cms Packagist
  • Critical 9.8
    CVE-2019-5715

    Silverstripe Framework SQLi Vulnerability

    All versions of SilverStripe 3 prior to 3.6.7 and 3.7.3, and all versions of SilverStripe 4 prior to 4.0.7, 4.1.5, 4.2.4, and 4.3.1 allows Reflected SQL Injection through Form and DataObject.

    silverstripe/framework Packagist