Skip to content
OpenAdvisories
High · 8.8 CVE-2022-38148 EUVD-2022-7430GHSA-rr8h-f97q-8p9c

Blind SQL Injection via GridFieldSortableHeader

Published Nov 21, 2022 · Updated Apr 30, 2025 · Assigned by mitre

Package: silverstripe/framework Ecosystem: Packagist

Description

Silverstripe silverstripe/framework through 4.11 allows SQL Injection.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist silverstripe/framework >= 4.0.0, < 4.10.11 4.10.11 GHSA-rr8h-f97q-8p9c
Packagist silverstripe/framework >= 4.11.0, < 4.11.14 4.11.14 GHSA-rr8h-f97q-8p9c

References