Skip to content
OpenAdvisories

Product · silverstripe

silverstripe-graphql

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2023-44401

    Silverstripe GraqhQL's view permissions are bypassed for paginated lists of ORM data

    The Silverstripe CMS GraphQL Server serves Silverstripe data as GraphQL representations. In versions 4.0.0 prior to 4.3.7 and 5.0.0 prior to 5.1.3, `canView` permission checks are bypassed for ORM data in paginated GraphQL query results where the total number…

    silverstripe silverstripe-graphql silverstripe/graphql Packagist