Skip to content
OpenAdvisories

Product · silverstripe

silverstripe-admin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2023-49783

    No permission checks for editing/deleting records with CSV import form

    Silverstripe Admin provides a basic management interface for the Silverstripe Framework. In versions on the 1.x branch prior to 1.13.19 and on the 2.x branch prior to 2.1.8, users who don't have edit or delete permissions for records exposed in a `ModelAdmin`…

    silverstripe silverstripe-admin silverstripe/admin Packagist