{"url":"http://public2.vulnerablecode.io/api/packages/22957?format=json","purl":"pkg:composer/silverstripe/framework@3.2.0-alpha0","type":"composer","namespace":"silverstripe","name":"framework","version":"3.2.0-alpha0","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"5.3.23","latest_non_vulnerable_version":"6.0.0-alpha1","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7482?format=json","vulnerability_id":"VCID-8wbx-bvm9-jqcv","summary":"ChangePasswordForm doesn't check Member::canLogIn()\nAfter performing a password reset, `ChangePasswordForm::doChangePassword()` logs in the user without checking `Member::canLogIn()`. This presents an issue for sites that are using the extension point in that method to deny access to users (for example members that have not been “approved”, or members that have had their access revoked temporarily). It looks like `Member::canLogIn()` was originally designed to only be used for checking whether the user is locked out (due to too many incorrect login attempts) but has been opened up to other uses.","references":[{"reference_url":"https://www.silverstripe.org/download/security-releases/ss-2016-011/","reference_id":"","reference_type":"","scores":[],"url":"https://www.silverstripe.org/download/security-releases/ss-2016-011/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/22961?format=json","purl":"pkg:composer/silverstripe/framework@3.2.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cg3k-vmk4-5kdb"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-krjm-ygks-wyct"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"},{"vulnerability":"VCID-z7fk-zbvh-quew"},{"vulnerability":"VCID-zxmh-xcvd-53fe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.2.5"},{"url":"http://public2.vulnerablecode.io/api/packages/22962?format=json","purl":"pkg:composer/silverstripe/framework@3.3.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cg3k-vmk4-5kdb"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-krjm-ygks-wyct"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"},{"vulnerability":"VCID-z7fk-zbvh-quew"},{"vulnerability":"VCID-zxmh-xcvd-53fe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.3.3"},{"url":"http://public2.vulnerablecode.io/api/packages/22998?format=json","purl":"pkg:composer/silverstripe/framework@3.4.10-stable","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.4.10-stable"},{"url":"http://public2.vulnerablecode.io/api/packages/156548?format=json","purl":"pkg:composer/silverstripe/framework@4.0.0-alpha1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.0-alpha1"}],"aliases":["SS-2016-011"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-8wbx-bvm9-jqcv"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7481?format=json","vulnerability_id":"VCID-dx5f-g875-5bct","summary":"Pre-existing alc_enc cookies log users in if remember me is disabled\nIf remember me is on and users log in with the box checked, if the developer then disabled \"remember me\" function, any pre-existing cookies will continue to authenticate users.","references":[{"reference_url":"https://www.silverstripe.org/download/security-releases/ss-2016-014/","reference_id":"","reference_type":"","scores":[],"url":"https://www.silverstripe.org/download/security-releases/ss-2016-014/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/22961?format=json","purl":"pkg:composer/silverstripe/framework@3.2.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cg3k-vmk4-5kdb"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-krjm-ygks-wyct"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"},{"vulnerability":"VCID-z7fk-zbvh-quew"},{"vulnerability":"VCID-zxmh-xcvd-53fe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.2.5"},{"url":"http://public2.vulnerablecode.io/api/packages/22962?format=json","purl":"pkg:composer/silverstripe/framework@3.3.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cg3k-vmk4-5kdb"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-krjm-ygks-wyct"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"},{"vulnerability":"VCID-z7fk-zbvh-quew"},{"vulnerability":"VCID-zxmh-xcvd-53fe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.3.3"},{"url":"http://public2.vulnerablecode.io/api/packages/22963?format=json","purl":"pkg:composer/silverstripe/framework@3.4.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-3ydp-barm-5ya1"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-bmqt-5ybj-kuf6"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cg3k-vmk4-5kdb"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-ete7-tupf-63c9"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-krjm-ygks-wyct"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-tzmx-hfk2-7ufr"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"},{"vulnerability":"VCID-z7fk-zbvh-quew"},{"vulnerability":"VCID-zxmh-xcvd-53fe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.4.1"},{"url":"http://public2.vulnerablecode.io/api/packages/156548?format=json","purl":"pkg:composer/silverstripe/framework@4.0.0-alpha1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.0-alpha1"}],"aliases":["SS-2016-014"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-dx5f-g875-5bct"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7478?format=json","vulnerability_id":"VCID-hgkh-tcdc-ufd5","summary":"Missing ACL on reports\nThe `SS_Report`, and the reports CMS section only checks `canView()` when listing the reports that can be viewed by the current user. It does not (and should) perform `canView` checks when the report is actually viewed, so if you know the URL to a report and can otherwise access the Reports section of the CMS, you can view any report.","references":[{"reference_url":"https://www.silverstripe.org/download/security-releases/ss-2016-012/","reference_id":"","reference_type":"","scores":[],"url":"https://www.silverstripe.org/download/security-releases/ss-2016-012/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/22961?format=json","purl":"pkg:composer/silverstripe/framework@3.2.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cg3k-vmk4-5kdb"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-krjm-ygks-wyct"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"},{"vulnerability":"VCID-z7fk-zbvh-quew"},{"vulnerability":"VCID-zxmh-xcvd-53fe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.2.5"},{"url":"http://public2.vulnerablecode.io/api/packages/22962?format=json","purl":"pkg:composer/silverstripe/framework@3.3.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cg3k-vmk4-5kdb"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-krjm-ygks-wyct"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"},{"vulnerability":"VCID-z7fk-zbvh-quew"},{"vulnerability":"VCID-zxmh-xcvd-53fe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.3.3"},{"url":"http://public2.vulnerablecode.io/api/packages/22963?format=json","purl":"pkg:composer/silverstripe/framework@3.4.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-3ydp-barm-5ya1"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-bmqt-5ybj-kuf6"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cg3k-vmk4-5kdb"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-ete7-tupf-63c9"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-krjm-ygks-wyct"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-tzmx-hfk2-7ufr"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"},{"vulnerability":"VCID-z7fk-zbvh-quew"},{"vulnerability":"VCID-zxmh-xcvd-53fe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.4.1"},{"url":"http://public2.vulnerablecode.io/api/packages/156548?format=json","purl":"pkg:composer/silverstripe/framework@4.0.0-alpha1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.0-alpha1"}],"aliases":["SS-2016-012"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-hgkh-tcdc-ufd5"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7485?format=json","vulnerability_id":"VCID-k7bb-y315-4qb6","summary":"XSS In OptionsetField and CheckboxSetField\nList of key / value pairs assigned to `OptionsetField` or `CheckboxSetField` do not have a default casting assigned to them. The effect of this is a potential XSS vulnerability in lists where either key or value contain unescaped HTML.","references":[{"reference_url":"https://www.silverstripe.org/download/security-releases/ss-2016-015/","reference_id":"","reference_type":"","scores":[],"url":"https://www.silverstripe.org/download/security-releases/ss-2016-015/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/22961?format=json","purl":"pkg:composer/silverstripe/framework@3.2.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cg3k-vmk4-5kdb"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-krjm-ygks-wyct"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"},{"vulnerability":"VCID-z7fk-zbvh-quew"},{"vulnerability":"VCID-zxmh-xcvd-53fe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.2.5"},{"url":"http://public2.vulnerablecode.io/api/packages/22962?format=json","purl":"pkg:composer/silverstripe/framework@3.3.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cg3k-vmk4-5kdb"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-krjm-ygks-wyct"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"},{"vulnerability":"VCID-z7fk-zbvh-quew"},{"vulnerability":"VCID-zxmh-xcvd-53fe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.3.3"},{"url":"http://public2.vulnerablecode.io/api/packages/22963?format=json","purl":"pkg:composer/silverstripe/framework@3.4.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-3ydp-barm-5ya1"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-bmqt-5ybj-kuf6"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cg3k-vmk4-5kdb"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-ete7-tupf-63c9"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-krjm-ygks-wyct"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-tzmx-hfk2-7ufr"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"},{"vulnerability":"VCID-z7fk-zbvh-quew"},{"vulnerability":"VCID-zxmh-xcvd-53fe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.4.1"},{"url":"http://public2.vulnerablecode.io/api/packages/156548?format=json","purl":"pkg:composer/silverstripe/framework@4.0.0-alpha1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.0-alpha1"}],"aliases":["SS-2016-015"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-k7bb-y315-4qb6"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7486?format=json","vulnerability_id":"VCID-p52e-s67u-eya7","summary":"Member.Name isn't escaped\nThe core template `framework/templates/Includes/GridField_print.ss` uses \"Printed by $Member.Name\". If the currently logged in members first name or surname contain XSS, this prints the raw HTML out, because `Member->getName()` just returns the raw `FirstName + Surname` as a string, which is injected directly.","references":[{"reference_url":"https://www.silverstripe.org/download/security-releases/ss-2016-013/","reference_id":"","reference_type":"","scores":[],"url":"https://www.silverstripe.org/download/security-releases/ss-2016-013/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/22961?format=json","purl":"pkg:composer/silverstripe/framework@3.2.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cg3k-vmk4-5kdb"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-krjm-ygks-wyct"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"},{"vulnerability":"VCID-z7fk-zbvh-quew"},{"vulnerability":"VCID-zxmh-xcvd-53fe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.2.5"},{"url":"http://public2.vulnerablecode.io/api/packages/22962?format=json","purl":"pkg:composer/silverstripe/framework@3.3.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cg3k-vmk4-5kdb"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-krjm-ygks-wyct"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"},{"vulnerability":"VCID-z7fk-zbvh-quew"},{"vulnerability":"VCID-zxmh-xcvd-53fe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.3.3"},{"url":"http://public2.vulnerablecode.io/api/packages/22963?format=json","purl":"pkg:composer/silverstripe/framework@3.4.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-3ydp-barm-5ya1"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-bmqt-5ybj-kuf6"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cg3k-vmk4-5kdb"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-ete7-tupf-63c9"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-krjm-ygks-wyct"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-tzmx-hfk2-7ufr"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"},{"vulnerability":"VCID-z7fk-zbvh-quew"},{"vulnerability":"VCID-zxmh-xcvd-53fe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.4.1"},{"url":"http://public2.vulnerablecode.io/api/packages/156548?format=json","purl":"pkg:composer/silverstripe/framework@4.0.0-alpha1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.0-alpha1"}],"aliases":["SS-2016-013"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-p52e-s67u-eya7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7483?format=json","vulnerability_id":"VCID-wrnm-d19b-hqby","summary":"Password encryption salt expiry\nWhen a user changes their password, the internal salt used for hashing their password is not updated.","references":[{"reference_url":"https://www.silverstripe.org/download/security-releases/ss-2016-008/","reference_id":"","reference_type":"","scores":[],"url":"https://www.silverstripe.org/download/security-releases/ss-2016-008/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/22961?format=json","purl":"pkg:composer/silverstripe/framework@3.2.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cg3k-vmk4-5kdb"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-krjm-ygks-wyct"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"},{"vulnerability":"VCID-z7fk-zbvh-quew"},{"vulnerability":"VCID-zxmh-xcvd-53fe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.2.5"},{"url":"http://public2.vulnerablecode.io/api/packages/22962?format=json","purl":"pkg:composer/silverstripe/framework@3.3.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cg3k-vmk4-5kdb"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-krjm-ygks-wyct"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"},{"vulnerability":"VCID-z7fk-zbvh-quew"},{"vulnerability":"VCID-zxmh-xcvd-53fe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.3.3"},{"url":"http://public2.vulnerablecode.io/api/packages/22963?format=json","purl":"pkg:composer/silverstripe/framework@3.4.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-3ydp-barm-5ya1"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-bmqt-5ybj-kuf6"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cg3k-vmk4-5kdb"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-ete7-tupf-63c9"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-krjm-ygks-wyct"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-tzmx-hfk2-7ufr"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"},{"vulnerability":"VCID-z7fk-zbvh-quew"},{"vulnerability":"VCID-zxmh-xcvd-53fe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.4.1"},{"url":"http://public2.vulnerablecode.io/api/packages/156548?format=json","purl":"pkg:composer/silverstripe/framework@4.0.0-alpha1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.0-alpha1"}],"aliases":["SS-2016-008"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-wrnm-d19b-hqby"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7563?format=json","vulnerability_id":"VCID-z7fk-zbvh-quew","summary":"XSS In CMSSecurity BackURL\nIn follow up to SS-2016-001 there is yet a minor unresolved fix to incorrectly encoded URL.","references":[{"reference_url":"https://www.silverstripe.org/download/security-releases/ss-2016-001/","reference_id":"","reference_type":"","scores":[],"url":"https://www.silverstripe.org/download/security-releases/ss-2016-001/"},{"reference_url":"https://www.silverstripe.org/download/security-releases/ss-2016-016/","reference_id":"","reference_type":"","scores":[],"url":"https://www.silverstripe.org/download/security-releases/ss-2016-016/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/23306?format=json","purl":"pkg:composer/silverstripe/framework@3.2.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.2.6"},{"url":"http://public2.vulnerablecode.io/api/packages/23307?format=json","purl":"pkg:composer/silverstripe/framework@3.3.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.3.4"},{"url":"http://public2.vulnerablecode.io/api/packages/23308?format=json","purl":"pkg:composer/silverstripe/framework@3.4.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-3ydp-barm-5ya1"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-bmqt-5ybj-kuf6"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-ete7-tupf-63c9"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-tzmx-hfk2-7ufr"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.4.2"}],"aliases":["SS-2016-016"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-z7fk-zbvh-quew"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/7564?format=json","vulnerability_id":"VCID-zxmh-xcvd-53fe","summary":"ReadOnly transformation for formfields exploitable\nForm fields returning `isReadonly()` as true are vulnerable to reflected XSS injections. This includes `ReadonlyField`, `LookupField`, `HTMLReadonlyField`, as well as special purpose fields like `TimeField_Readonly`. Values submitted to through these form fields are not filtered out from the form session data, and might be shown to the user depending on the form behaviour. For example, form validation errors cause the form to re-render with previously submitted values by default. SilverStripe forms automatically load values from request data (GET and POST), which enables malicious use of URLs if your form uses these fields and does not overwrite data on form construction. Readonly and disabled form fields are already filtered out in `saveInto()`, so maliciously submitted data on these fields does not make it into the database unless you are accessing form values directly in your saving logic.","references":[{"reference_url":"https://www.silverstripe.org/download/security-releases/ss-2016-010/","reference_id":"","reference_type":"","scores":[],"url":"https://www.silverstripe.org/download/security-releases/ss-2016-010/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/23306?format=json","purl":"pkg:composer/silverstripe/framework@3.2.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.2.6"},{"url":"http://public2.vulnerablecode.io/api/packages/23307?format=json","purl":"pkg:composer/silverstripe/framework@3.3.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.3.4"},{"url":"http://public2.vulnerablecode.io/api/packages/23308?format=json","purl":"pkg:composer/silverstripe/framework@3.4.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2f9j-ek3x-kbc5"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-3ydp-barm-5ya1"},{"vulnerability":"VCID-414d-7bfm-kud7"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-bmqt-5ybj-kuf6"},{"vulnerability":"VCID-c3vp-kc9a-vkhn"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-ete7-tupf-63c9"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-j6ze-f76y-cqgy"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kdyk-rrrr-pufw"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-tzmx-hfk2-7ufr"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ya8k-c5s5-47gx"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.4.2"}],"aliases":["SS-2016-010"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zxmh-xcvd-53fe"}],"fixing_vulnerabilities":[],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.2.0-alpha0"}