Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-9g6t-9zca-hket
Summary
Unpublished, protected files can be published via shortcode
Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control that allows protected images to be published by changing an existing image short code on website content. Draft protected images can be published by changing an existing image shortcode on website content to match the ID of the draft protected image and then publishing the website content.
Aliases
0
alias CVE-2022-29858
1
alias GHSA-v68g-62v9-39w5
Fixed_packages
0
url pkg:composer/silverstripe/assets@1.10.1
purl pkg:composer/silverstripe/assets@1.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ftdr-uzuh-8ybc
1
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.10.1
Affected_packages
0
url pkg:composer/silverstripe/assets@1.0.0
purl pkg:composer/silverstripe/assets@1.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.0.0
1
url pkg:composer/silverstripe/assets@1.0.1-rc1
purl pkg:composer/silverstripe/assets@1.0.1-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.0.1-rc1
2
url pkg:composer/silverstripe/assets@1.0.1
purl pkg:composer/silverstripe/assets@1.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.0.1
3
url pkg:composer/silverstripe/assets@1.0.2
purl pkg:composer/silverstripe/assets@1.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.0.2
4
url pkg:composer/silverstripe/assets@1.0.3
purl pkg:composer/silverstripe/assets@1.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.0.3
5
url pkg:composer/silverstripe/assets@1.0.4
purl pkg:composer/silverstripe/assets@1.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.0.4
6
url pkg:composer/silverstripe/assets@1.0.5
purl pkg:composer/silverstripe/assets@1.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.0.5
7
url pkg:composer/silverstripe/assets@1.0.6
purl pkg:composer/silverstripe/assets@1.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.0.6
8
url pkg:composer/silverstripe/assets@1.0.7
purl pkg:composer/silverstripe/assets@1.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.0.7
9
url pkg:composer/silverstripe/assets@1.1.0-rc1
purl pkg:composer/silverstripe/assets@1.1.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.1.0-rc1
10
url pkg:composer/silverstripe/assets@1.1.0-rc2
purl pkg:composer/silverstripe/assets@1.1.0-rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.1.0-rc2
11
url pkg:composer/silverstripe/assets@1.1.0
purl pkg:composer/silverstripe/assets@1.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.1.0
12
url pkg:composer/silverstripe/assets@1.1.1
purl pkg:composer/silverstripe/assets@1.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.1.1
13
url pkg:composer/silverstripe/assets@1.1.2
purl pkg:composer/silverstripe/assets@1.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.1.2
14
url pkg:composer/silverstripe/assets@1.1.3
purl pkg:composer/silverstripe/assets@1.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.1.3
15
url pkg:composer/silverstripe/assets@1.1.4
purl pkg:composer/silverstripe/assets@1.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.1.4
16
url pkg:composer/silverstripe/assets@1.1.5
purl pkg:composer/silverstripe/assets@1.1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.1.5
17
url pkg:composer/silverstripe/assets@1.2.0-beta1
purl pkg:composer/silverstripe/assets@1.2.0-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.2.0-beta1
18
url pkg:composer/silverstripe/assets@1.2.0
purl pkg:composer/silverstripe/assets@1.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.2.0
19
url pkg:composer/silverstripe/assets@1.2.1
purl pkg:composer/silverstripe/assets@1.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.2.1
20
url pkg:composer/silverstripe/assets@1.2.2
purl pkg:composer/silverstripe/assets@1.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.2.2
21
url pkg:composer/silverstripe/assets@1.2.3
purl pkg:composer/silverstripe/assets@1.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.2.3
22
url pkg:composer/silverstripe/assets@1.2.4
purl pkg:composer/silverstripe/assets@1.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.2.4
23
url pkg:composer/silverstripe/assets@1.2.5
purl pkg:composer/silverstripe/assets@1.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.2.5
24
url pkg:composer/silverstripe/assets@1.3.0-rc1
purl pkg:composer/silverstripe/assets@1.3.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.3.0-rc1
25
url pkg:composer/silverstripe/assets@1.3.0
purl pkg:composer/silverstripe/assets@1.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.3.0
26
url pkg:composer/silverstripe/assets@1.3.1
purl pkg:composer/silverstripe/assets@1.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.3.1
27
url pkg:composer/silverstripe/assets@1.3.2
purl pkg:composer/silverstripe/assets@1.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.3.2
28
url pkg:composer/silverstripe/assets@1.3.3
purl pkg:composer/silverstripe/assets@1.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.3.3
29
url pkg:composer/silverstripe/assets@1.3.4
purl pkg:composer/silverstripe/assets@1.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.3.4
30
url pkg:composer/silverstripe/assets@1.3.5
purl pkg:composer/silverstripe/assets@1.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-dc9y-v257-6bhf
2
vulnerability VCID-ftdr-uzuh-8ybc
3
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.3.5
31
url pkg:composer/silverstripe/assets@1.4.0-rc1
purl pkg:composer/silverstripe/assets@1.4.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-dc9y-v257-6bhf
2
vulnerability VCID-ftdr-uzuh-8ybc
3
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.0-rc1
32
url pkg:composer/silverstripe/assets@1.4.0
purl pkg:composer/silverstripe/assets@1.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.0
33
url pkg:composer/silverstripe/assets@1.4.1
purl pkg:composer/silverstripe/assets@1.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.1
34
url pkg:composer/silverstripe/assets@1.4.2
purl pkg:composer/silverstripe/assets@1.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.2
35
url pkg:composer/silverstripe/assets@1.4.3
purl pkg:composer/silverstripe/assets@1.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-bdcq-z11u-zyh5
2
vulnerability VCID-dc9y-v257-6bhf
3
vulnerability VCID-ftdr-uzuh-8ybc
4
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.3
36
url pkg:composer/silverstripe/assets@1.4.4
purl pkg:composer/silverstripe/assets@1.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-dc9y-v257-6bhf
2
vulnerability VCID-ftdr-uzuh-8ybc
3
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.4
37
url pkg:composer/silverstripe/assets@1.4.5
purl pkg:composer/silverstripe/assets@1.4.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-dc9y-v257-6bhf
2
vulnerability VCID-ftdr-uzuh-8ybc
3
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.5
38
url pkg:composer/silverstripe/assets@1.4.6
purl pkg:composer/silverstripe/assets@1.4.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-dc9y-v257-6bhf
2
vulnerability VCID-ftdr-uzuh-8ybc
3
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.6
39
url pkg:composer/silverstripe/assets@1.4.7
purl pkg:composer/silverstripe/assets@1.4.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.7
40
url pkg:composer/silverstripe/assets@1.4.8
purl pkg:composer/silverstripe/assets@1.4.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.4.8
41
url pkg:composer/silverstripe/assets@1.5.0-alpha1
purl pkg:composer/silverstripe/assets@1.5.0-alpha1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.5.0-alpha1
42
url pkg:composer/silverstripe/assets@1.5.0-rc1
purl pkg:composer/silverstripe/assets@1.5.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.5.0-rc1
43
url pkg:composer/silverstripe/assets@1.5.0-rc2
purl pkg:composer/silverstripe/assets@1.5.0-rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.5.0-rc2
44
url pkg:composer/silverstripe/assets@1.5.0
purl pkg:composer/silverstripe/assets@1.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-dc9y-v257-6bhf
2
vulnerability VCID-ftdr-uzuh-8ybc
3
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.5.0
45
url pkg:composer/silverstripe/assets@1.5.1
purl pkg:composer/silverstripe/assets@1.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-dc9y-v257-6bhf
2
vulnerability VCID-ftdr-uzuh-8ybc
3
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.5.1
46
url pkg:composer/silverstripe/assets@1.5.2
purl pkg:composer/silverstripe/assets@1.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.5.2
47
url pkg:composer/silverstripe/assets@1.5.3
purl pkg:composer/silverstripe/assets@1.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.5.3
48
url pkg:composer/silverstripe/assets@1.6.0-beta1
purl pkg:composer/silverstripe/assets@1.6.0-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.6.0-beta1
49
url pkg:composer/silverstripe/assets@1.6.0-rc1
purl pkg:composer/silverstripe/assets@1.6.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.6.0-rc1
50
url pkg:composer/silverstripe/assets@1.6.0
purl pkg:composer/silverstripe/assets@1.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.6.0
51
url pkg:composer/silverstripe/assets@1.6.1
purl pkg:composer/silverstripe/assets@1.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.6.1
52
url pkg:composer/silverstripe/assets@1.7.0-beta1
purl pkg:composer/silverstripe/assets@1.7.0-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.7.0-beta1
53
url pkg:composer/silverstripe/assets@1.7.0-rc1
purl pkg:composer/silverstripe/assets@1.7.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.7.0-rc1
54
url pkg:composer/silverstripe/assets@1.7.0
purl pkg:composer/silverstripe/assets@1.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.7.0
55
url pkg:composer/silverstripe/assets@1.7.1
purl pkg:composer/silverstripe/assets@1.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.7.1
56
url pkg:composer/silverstripe/assets@1.8.0-beta1
purl pkg:composer/silverstripe/assets@1.8.0-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.8.0-beta1
57
url pkg:composer/silverstripe/assets@1.8.0-rc1
purl pkg:composer/silverstripe/assets@1.8.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.8.0-rc1
58
url pkg:composer/silverstripe/assets@1.8.0
purl pkg:composer/silverstripe/assets@1.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.8.0
59
url pkg:composer/silverstripe/assets@1.9.0-alpha1
purl pkg:composer/silverstripe/assets@1.9.0-alpha1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.9.0-alpha1
60
url pkg:composer/silverstripe/assets@1.9.0-beta1
purl pkg:composer/silverstripe/assets@1.9.0-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.9.0-beta1
61
url pkg:composer/silverstripe/assets@1.9.0-rc1
purl pkg:composer/silverstripe/assets@1.9.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.9.0-rc1
62
url pkg:composer/silverstripe/assets@1.9.0
purl pkg:composer/silverstripe/assets@1.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.9.0
63
url pkg:composer/silverstripe/assets@1.10.0-beta1
purl pkg:composer/silverstripe/assets@1.10.0-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.10.0-beta1
64
url pkg:composer/silverstripe/assets@1.10.0-rc1
purl pkg:composer/silverstripe/assets@1.10.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.10.0-rc1
65
url pkg:composer/silverstripe/assets@1.10.0
purl pkg:composer/silverstripe/assets@1.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-9g6t-9zca-hket
1
vulnerability VCID-ftdr-uzuh-8ybc
2
vulnerability VCID-mhey-g1u8-wbbv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/assets@1.10.0
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-29858
reference_id
reference_type
scores
0
value 0.00332
scoring_system epss
scoring_elements 0.56076
published_at 2026-04-04T12:55:00Z
1
value 0.00332
scoring_system epss
scoring_elements 0.56116
published_at 2026-04-16T12:55:00Z
2
value 0.00332
scoring_system epss
scoring_elements 0.56081
published_at 2026-04-13T12:55:00Z
3
value 0.00332
scoring_system epss
scoring_elements 0.56098
published_at 2026-04-12T12:55:00Z
4
value 0.00332
scoring_system epss
scoring_elements 0.56122
published_at 2026-04-11T12:55:00Z
5
value 0.00332
scoring_system epss
scoring_elements 0.5611
published_at 2026-04-09T12:55:00Z
6
value 0.00332
scoring_system epss
scoring_elements 0.56105
published_at 2026-04-08T12:55:00Z
7
value 0.00332
scoring_system epss
scoring_elements 0.56055
published_at 2026-04-02T12:55:00Z
8
value 0.00332
scoring_system epss
scoring_elements 0.56054
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-29858
1
reference_url https://forum.silverstripe.org/c/releases
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://forum.silverstripe.org/c/releases
2
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/assets/CVE-2022-29858.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/assets/CVE-2022-29858.yaml
3
reference_url https://github.com/silverstripe/silverstripe-assets/commit/5f6a73b010c01587ffbfb954441f6b7cbb54e767
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/silverstripe/silverstripe-assets/commit/5f6a73b010c01587ffbfb954441f6b7cbb54e767
4
reference_url https://huntr.dev/bounties/90e17d95-9f2f-44eb-9f26-49fa13a41d5a
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/90e17d95-9f2f-44eb-9f26-49fa13a41d5a
5
reference_url https://huntr.dev/bounties/90e17d95-9f2f-44eb-9f26-49fa13a41d5a/
reference_id
reference_type
scores
url https://huntr.dev/bounties/90e17d95-9f2f-44eb-9f26-49fa13a41d5a/
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-29858
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-29858
7
reference_url https://www.silverstripe.org/blog/tag/release
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.silverstripe.org/blog/tag/release
8
reference_url https://www.silverstripe.org/download/security-releases
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.silverstripe.org/download/security-releases
9
reference_url https://www.silverstripe.org/download/security-releases/
reference_id
reference_type
scores
url https://www.silverstripe.org/download/security-releases/
10
reference_url https://www.silverstripe.org/download/security-releases/cve-2022-29858
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.silverstripe.org/download/security-releases/cve-2022-29858
11
reference_url https://github.com/advisories/GHSA-v68g-62v9-39w5
reference_id GHSA-v68g-62v9-39w5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-v68g-62v9-39w5
Weaknesses
0
cwe_id 287
name Improper Authentication
description When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
1
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-9g6t-9zca-hket