Skip to content
OpenAdvisories
Low · 2.7 CVE-2019-12617 EUVD-2019-0733GHSA-6r58-4xgr-gm6m

SilverStripe Priviledge escalation through cache pollution

Published Sep 26, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Package: silverstripe/framework Ecosystem: Packagist

Description

In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist silverstripe/framework >= 4.4.0, < 4.4.4 4.4.4 GHSA-6r58-4xgr-gm6m
Packagist silverstripe/framework >= 4.3.0, < 4.3.5 4.3.5 GHSA-6r58-4xgr-gm6m

References