Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-mhey-g1u8-wbbv
Summary
XSS via uploaded gpx file
A malicious content author could upload a GPX file with a Javascript payload. The payload could then be executed by luring a legitimate user to view the file in a browser with support for GPX files. GPX is an XML-based format used to store GPS data.

By default, Silverstripe CMS will no longer allow GPX files to be uploaded to the assets area.
Aliases
0
alias CVE-2022-38147
1
alias GHSA-vv3r-fxqp-vr3f
2
alias GMS-2022-6854
Fixed_packages
0
url pkg:composer/silverstripe/assets@1.11.1
purl pkg:composer/silverstripe/assets@1.11.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.11.1
Affected_packages
0
url pkg:composer/silverstripe/assets@1.0.0
purl pkg:composer/silverstripe/assets@1.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.0.0
1
url pkg:composer/silverstripe/assets@1.0.1-rc1
purl pkg:composer/silverstripe/assets@1.0.1-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.0.1-rc1
2
url pkg:composer/silverstripe/assets@1.0.1
purl pkg:composer/silverstripe/assets@1.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.0.1
3
url pkg:composer/silverstripe/assets@1.0.2
purl pkg:composer/silverstripe/assets@1.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.0.2
4
url pkg:composer/silverstripe/assets@1.0.3
purl pkg:composer/silverstripe/assets@1.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.0.3
5
url pkg:composer/silverstripe/assets@1.0.4
purl pkg:composer/silverstripe/assets@1.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.0.4
6
url pkg:composer/silverstripe/assets@1.0.5
purl pkg:composer/silverstripe/assets@1.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.0.5
7
url pkg:composer/silverstripe/assets@1.0.6
purl pkg:composer/silverstripe/assets@1.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.0.6
8
url pkg:composer/silverstripe/assets@1.0.7
purl pkg:composer/silverstripe/assets@1.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.0.7
9
url pkg:composer/silverstripe/assets@1.1.0-rc1
purl pkg:composer/silverstripe/assets@1.1.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.1.0-rc1
10
url pkg:composer/silverstripe/assets@1.1.0-rc2
purl pkg:composer/silverstripe/assets@1.1.0-rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.1.0-rc2
11
url pkg:composer/silverstripe/assets@1.1.0
purl pkg:composer/silverstripe/assets@1.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.1.0
12
url pkg:composer/silverstripe/assets@1.1.1
purl pkg:composer/silverstripe/assets@1.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.1.1
13
url pkg:composer/silverstripe/assets@1.1.2
purl pkg:composer/silverstripe/assets@1.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.1.2
14
url pkg:composer/silverstripe/assets@1.1.3
purl pkg:composer/silverstripe/assets@1.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.1.3
15
url pkg:composer/silverstripe/assets@1.1.4
purl pkg:composer/silverstripe/assets@1.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.1.4
16
url pkg:composer/silverstripe/assets@1.1.5
purl pkg:composer/silverstripe/assets@1.1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.1.5
17
url pkg:composer/silverstripe/assets@1.2.0-beta1
purl pkg:composer/silverstripe/assets@1.2.0-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.2.0-beta1
18
url pkg:composer/silverstripe/assets@1.2.0
purl pkg:composer/silverstripe/assets@1.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.2.0
19
url pkg:composer/silverstripe/assets@1.2.1
purl pkg:composer/silverstripe/assets@1.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.2.1
20
url pkg:composer/silverstripe/assets@1.2.2
purl pkg:composer/silverstripe/assets@1.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.2.2
21
url pkg:composer/silverstripe/assets@1.2.3
purl pkg:composer/silverstripe/assets@1.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.2.3
22
url pkg:composer/silverstripe/assets@1.2.4
purl pkg:composer/silverstripe/assets@1.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.2.4
23
url pkg:composer/silverstripe/assets@1.2.5
purl pkg:composer/silverstripe/assets@1.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.2.5
24
url pkg:composer/silverstripe/assets@1.3.0-rc1
purl pkg:composer/silverstripe/assets@1.3.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.3.0-rc1
25
url pkg:composer/silverstripe/assets@1.3.0
purl pkg:composer/silverstripe/assets@1.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.3.0
26
url pkg:composer/silverstripe/assets@1.3.1
purl pkg:composer/silverstripe/assets@1.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.3.1
27
url pkg:composer/silverstripe/assets@1.3.2
purl pkg:composer/silverstripe/assets@1.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.3.2
28
url pkg:composer/silverstripe/assets@1.3.3
purl pkg:composer/silverstripe/assets@1.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.3.3
29
url pkg:composer/silverstripe/assets@1.3.4
purl pkg:composer/silverstripe/assets@1.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.3.4
30
url pkg:composer/silverstripe/assets@1.3.5
purl pkg:composer/silverstripe/assets@1.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-dc9y-v257-6bhf
2
vulnerability VCID-ftdr-uzuh-8ybc
3
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.3.5
31
url pkg:composer/silverstripe/assets@1.4.0-rc1
purl pkg:composer/silverstripe/assets@1.4.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-dc9y-v257-6bhf
2
vulnerability VCID-ftdr-uzuh-8ybc
3
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.0-rc1
32
url pkg:composer/silverstripe/assets@1.4.0
purl pkg:composer/silverstripe/assets@1.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.0
33
url pkg:composer/silverstripe/assets@1.4.1
purl pkg:composer/silverstripe/assets@1.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.1
34
url pkg:composer/silverstripe/assets@1.4.2
purl pkg:composer/silverstripe/assets@1.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.2
35
url pkg:composer/silverstripe/assets@1.4.3
purl pkg:composer/silverstripe/assets@1.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.3
36
url pkg:composer/silverstripe/assets@1.4.4
purl pkg:composer/silverstripe/assets@1.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-dc9y-v257-6bhf
2
vulnerability VCID-ftdr-uzuh-8ybc
3
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.4
37
url pkg:composer/silverstripe/assets@1.4.5
purl pkg:composer/silverstripe/assets@1.4.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-dc9y-v257-6bhf
2
vulnerability VCID-ftdr-uzuh-8ybc
3
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.5
38
url pkg:composer/silverstripe/assets@1.4.6
purl pkg:composer/silverstripe/assets@1.4.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-dc9y-v257-6bhf
2
vulnerability VCID-ftdr-uzuh-8ybc
3
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.6
39
url pkg:composer/silverstripe/assets@1.4.7
purl pkg:composer/silverstripe/assets@1.4.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.7
40
url pkg:composer/silverstripe/assets@1.4.8
purl pkg:composer/silverstripe/assets@1.4.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.8
41
url pkg:composer/silverstripe/assets@1.5.0-alpha1
purl pkg:composer/silverstripe/assets@1.5.0-alpha1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.5.0-alpha1
42
url pkg:composer/silverstripe/assets@1.5.0-rc1
purl pkg:composer/silverstripe/assets@1.5.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.5.0-rc1
43
url pkg:composer/silverstripe/assets@1.5.0-rc2
purl pkg:composer/silverstripe/assets@1.5.0-rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.5.0-rc2
44
url pkg:composer/silverstripe/assets@1.5.0
purl pkg:composer/silverstripe/assets@1.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-dc9y-v257-6bhf
2
vulnerability VCID-ftdr-uzuh-8ybc
3
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.5.0
45
url pkg:composer/silverstripe/assets@1.5.1
purl pkg:composer/silverstripe/assets@1.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-dc9y-v257-6bhf
2
vulnerability VCID-ftdr-uzuh-8ybc
3
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.5.1
46
url pkg:composer/silverstripe/assets@1.5.2
purl pkg:composer/silverstripe/assets@1.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.5.2
47
url pkg:composer/silverstripe/assets@1.5.3
purl pkg:composer/silverstripe/assets@1.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.5.3
48
url pkg:composer/silverstripe/assets@1.6.0-beta1
purl pkg:composer/silverstripe/assets@1.6.0-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.6.0-beta1
49
url pkg:composer/silverstripe/assets@1.6.0-rc1
purl pkg:composer/silverstripe/assets@1.6.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.6.0-rc1
50
url pkg:composer/silverstripe/assets@1.6.0
purl pkg:composer/silverstripe/assets@1.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.6.0
51
url pkg:composer/silverstripe/assets@1.6.1
purl pkg:composer/silverstripe/assets@1.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.6.1
52
url pkg:composer/silverstripe/assets@1.7.0-beta1
purl pkg:composer/silverstripe/assets@1.7.0-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.7.0-beta1
53
url pkg:composer/silverstripe/assets@1.7.0-rc1
purl pkg:composer/silverstripe/assets@1.7.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.7.0-rc1
54
url pkg:composer/silverstripe/assets@1.7.0
purl pkg:composer/silverstripe/assets@1.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.7.0
55
url pkg:composer/silverstripe/assets@1.7.1
purl pkg:composer/silverstripe/assets@1.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.7.1
56
url pkg:composer/silverstripe/assets@1.8.0-beta1
purl pkg:composer/silverstripe/assets@1.8.0-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.8.0-beta1
57
url pkg:composer/silverstripe/assets@1.8.0-rc1
purl pkg:composer/silverstripe/assets@1.8.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.8.0-rc1
58
url pkg:composer/silverstripe/assets@1.8.0
purl pkg:composer/silverstripe/assets@1.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.8.0
59
url pkg:composer/silverstripe/assets@1.9.0-alpha1
purl pkg:composer/silverstripe/assets@1.9.0-alpha1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.9.0-alpha1
60
url pkg:composer/silverstripe/assets@1.9.0-beta1
purl pkg:composer/silverstripe/assets@1.9.0-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.9.0-beta1
61
url pkg:composer/silverstripe/assets@1.9.0-rc1
purl pkg:composer/silverstripe/assets@1.9.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.9.0-rc1
62
url pkg:composer/silverstripe/assets@1.9.0
purl pkg:composer/silverstripe/assets@1.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.9.0
63
url pkg:composer/silverstripe/assets@1.10.0-beta1
purl pkg:composer/silverstripe/assets@1.10.0-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.10.0-beta1
64
url pkg:composer/silverstripe/assets@1.10.0-rc1
purl pkg:composer/silverstripe/assets@1.10.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.10.0-rc1
65
url pkg:composer/silverstripe/assets@1.10.0
purl pkg:composer/silverstripe/assets@1.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.10.0
66
url pkg:composer/silverstripe/assets@1.10.1
purl pkg:composer/silverstripe/assets@1.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ftdr-uzuh-8ybc
1
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.10.1
67
url pkg:composer/silverstripe/assets@1.11.0-beta1
purl pkg:composer/silverstripe/assets@1.11.0-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ftdr-uzuh-8ybc
1
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.11.0-beta1
68
url pkg:composer/silverstripe/assets@1.11.0-rc1
purl pkg:composer/silverstripe/assets@1.11.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ftdr-uzuh-8ybc
1
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.11.0-rc1
69
url pkg:composer/silverstripe/assets@1.11.0
purl pkg:composer/silverstripe/assets@1.11.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ftdr-uzuh-8ybc
1
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.11.0
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-38147
reference_id
reference_type
scores
0
value 0.00322
scoring_system epss
scoring_elements 0.55232
published_at 2026-04-04T12:55:00Z
1
value 0.00322
scoring_system epss
scoring_elements 0.55271
published_at 2026-04-16T12:55:00Z
2
value 0.00322
scoring_system epss
scoring_elements 0.55233
published_at 2026-04-13T12:55:00Z
3
value 0.00322
scoring_system epss
scoring_elements 0.55208
published_at 2026-04-02T12:55:00Z
4
value 0.00322
scoring_system epss
scoring_elements 0.55251
published_at 2026-04-12T12:55:00Z
5
value 0.00322
scoring_system epss
scoring_elements 0.55272
published_at 2026-04-11T12:55:00Z
6
value 0.00322
scoring_system epss
scoring_elements 0.5526
published_at 2026-04-09T12:55:00Z
7
value 0.00322
scoring_system epss
scoring_elements 0.55259
published_at 2026-04-08T12:55:00Z
8
value 0.00322
scoring_system epss
scoring_elements 0.5521
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-38147
1
reference_url https://forum.silverstripe.org/c/releases
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T20:26:17Z/
url https://forum.silverstripe.org/c/releases
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/assets/CVE-2022-38147.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/assets/CVE-2022-38147.yaml
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-38147
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-38147
4
reference_url https://www.silverstripe.org/blog/tag/release
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T20:26:17Z/
url https://www.silverstripe.org/blog/tag/release
5
reference_url https://www.silverstripe.org/download/security-releases
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.silverstripe.org/download/security-releases
6
reference_url https://www.silverstripe.org/download/security-releases/
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T20:26:17Z/
url https://www.silverstripe.org/download/security-releases/
7
reference_url https://www.silverstripe.org/download/security-releases/cve-2022-38147
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.silverstripe.org/download/security-releases/cve-2022-38147
8
reference_url https://www.silverstripe.org/download/security-releases/CVE-2022-38147
reference_id CVE-2022-38147
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-25T20:26:17Z/
url https://www.silverstripe.org/download/security-releases/CVE-2022-38147
9
reference_url https://github.com/advisories/GHSA-vv3r-fxqp-vr3f
reference_id GHSA-vv3r-fxqp-vr3f
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vv3r-fxqp-vr3f
Weaknesses
0
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
1
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-mhey-g1u8-wbbv