{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/19829?format=json","vulnerability_id":"VCID-xnb4-zjws-vuhu","summary":"silverstripe/framework uploaded PHP script execution in assets\nA weakness in the .htaccess rules preventing requests to uploaded PHP scripts allows PHP scripts that had made their way into the assets directory to be successfully executed through the use of a specially crafted URL. There are protections in place to disallow upload of PHP scripts through the CMS, meaning this weakness does not lead to direct vulnerabilities.\n\nIn addition, sites hosted on the New Zealand Common Web Platform or SilverStripe Platform have additional configuration in place which prevents PHP script execution in assets, even in a malicious party manages to upload these into the folder.","aliases":[{"alias":"GHSA-f43j-8hq4-2xj9"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/59974?format=json","purl":"pkg:composer/silverstripe/framework@4.0.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c75p-3hdz-q3b6"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cfgg-fgjt-z3hn"},{"vulnerability":"VCID-d5q3-jrdb-euav"},{"vulnerability":"VCID-dc9y-v257-6bhf"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-ftdr-uzuh-8ybc"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-gme6-wj87-ekfw"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kd3t-2gzd-q3hq"},{"vulnerability":"VCID-kgm4-g26x-gken"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-kxyq-vg6e-6uac"},{"vulnerability":"VCID-m8w1-g9h9-vuce"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qak9-2t7g-w3fv"},{"vulnerability":"VCID-qjgf-hxng-j3g9"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ua49-snhx-dqa4"},{"vulnerability":"VCID-w4fh-cpaq-nqat"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.4"},{"url":"http://public2.vulnerablecode.io/api/packages/59975?format=json","purl":"pkg:composer/silverstripe/framework@4.1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-658d-vmwt-f7e8"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c75p-3hdz-q3b6"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cfgg-fgjt-z3hn"},{"vulnerability":"VCID-d5q3-jrdb-euav"},{"vulnerability":"VCID-dc9y-v257-6bhf"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-ftdr-uzuh-8ybc"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-gme6-wj87-ekfw"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kd3t-2gzd-q3hq"},{"vulnerability":"VCID-kgm4-g26x-gken"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-kxyq-vg6e-6uac"},{"vulnerability":"VCID-m8w1-g9h9-vuce"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qak9-2t7g-w3fv"},{"vulnerability":"VCID-qjgf-hxng-j3g9"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ua49-snhx-dqa4"},{"vulnerability":"VCID-w4fh-cpaq-nqat"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.1.1"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/145600?format=json","purl":"pkg:composer/silverstripe/framework@4.0.0-rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1nes-cr3m-j3dv"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-6xwk-ee7f-5ubd"},{"vulnerability":"VCID-71cx-seqr-3fh5"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c75p-3hdz-q3b6"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-ff5q-59gf-nugg"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-g3kz-796v-4qf1"},{"vulnerability":"VCID-jx5m-bqc6-h3bv"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-kxyq-vg6e-6uac"},{"vulnerability":"VCID-p554-wkxw-gfdh"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qak9-2t7g-w3fv"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-v116-gayp-mbfu"},{"vulnerability":"VCID-xnb4-zjws-vuhu"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.0-rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/193718?format=json","purl":"pkg:composer/silverstripe/framework@4.0.0-rc2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1nes-cr3m-j3dv"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-6xwk-ee7f-5ubd"},{"vulnerability":"VCID-71cx-seqr-3fh5"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c75p-3hdz-q3b6"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-ff5q-59gf-nugg"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-g3kz-796v-4qf1"},{"vulnerability":"VCID-jx5m-bqc6-h3bv"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-kxyq-vg6e-6uac"},{"vulnerability":"VCID-p554-wkxw-gfdh"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qak9-2t7g-w3fv"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-v116-gayp-mbfu"},{"vulnerability":"VCID-xnb4-zjws-vuhu"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.0-rc2"},{"url":"http://public2.vulnerablecode.io/api/packages/193719?format=json","purl":"pkg:composer/silverstripe/framework@4.0.0-rc3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1nes-cr3m-j3dv"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-6xwk-ee7f-5ubd"},{"vulnerability":"VCID-71cx-seqr-3fh5"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c75p-3hdz-q3b6"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-ff5q-59gf-nugg"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-g3kz-796v-4qf1"},{"vulnerability":"VCID-jx5m-bqc6-h3bv"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-kxyq-vg6e-6uac"},{"vulnerability":"VCID-p554-wkxw-gfdh"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qak9-2t7g-w3fv"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-v116-gayp-mbfu"},{"vulnerability":"VCID-xnb4-zjws-vuhu"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.0-rc3"},{"url":"http://public2.vulnerablecode.io/api/packages/26303?format=json","purl":"pkg:composer/silverstripe/framework@4.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1nes-cr3m-j3dv"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-6xwk-ee7f-5ubd"},{"vulnerability":"VCID-71cx-seqr-3fh5"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ab5z-bqka-xudb"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c75p-3hdz-q3b6"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cfgg-fgjt-z3hn"},{"vulnerability":"VCID-d5q3-jrdb-euav"},{"vulnerability":"VCID-dc9y-v257-6bhf"},{"vulnerability":"VCID-eddc-w9wx-c3gq"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-ff5q-59gf-nugg"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-ftdr-uzuh-8ybc"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-g3kz-796v-4qf1"},{"vulnerability":"VCID-gme6-wj87-ekfw"},{"vulnerability":"VCID-jx5m-bqc6-h3bv"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kd3t-2gzd-q3hq"},{"vulnerability":"VCID-kgm4-g26x-gken"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-kxyq-vg6e-6uac"},{"vulnerability":"VCID-m8w1-g9h9-vuce"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-p554-wkxw-gfdh"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qak9-2t7g-w3fv"},{"vulnerability":"VCID-qjgf-hxng-j3g9"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-tm1s-2m92-uyh9"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ua49-snhx-dqa4"},{"vulnerability":"VCID-v116-gayp-mbfu"},{"vulnerability":"VCID-w4fh-cpaq-nqat"},{"vulnerability":"VCID-xnb4-zjws-vuhu"},{"vulnerability":"VCID-xw77-b18v-8kc4"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/167507?format=json","purl":"pkg:composer/silverstripe/framework@4.0.1-rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1nes-cr3m-j3dv"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-6xwk-ee7f-5ubd"},{"vulnerability":"VCID-71cx-seqr-3fh5"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c75p-3hdz-q3b6"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cfgg-fgjt-z3hn"},{"vulnerability":"VCID-d5q3-jrdb-euav"},{"vulnerability":"VCID-dc9y-v257-6bhf"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-ff5q-59gf-nugg"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-ftdr-uzuh-8ybc"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-g3kz-796v-4qf1"},{"vulnerability":"VCID-gme6-wj87-ekfw"},{"vulnerability":"VCID-jx5m-bqc6-h3bv"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kd3t-2gzd-q3hq"},{"vulnerability":"VCID-kgm4-g26x-gken"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-kxyq-vg6e-6uac"},{"vulnerability":"VCID-m8w1-g9h9-vuce"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-p554-wkxw-gfdh"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qak9-2t7g-w3fv"},{"vulnerability":"VCID-qjgf-hxng-j3g9"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ua49-snhx-dqa4"},{"vulnerability":"VCID-v116-gayp-mbfu"},{"vulnerability":"VCID-w4fh-cpaq-nqat"},{"vulnerability":"VCID-xnb4-zjws-vuhu"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.1-rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/26306?format=json","purl":"pkg:composer/silverstripe/framework@4.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1nes-cr3m-j3dv"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c75p-3hdz-q3b6"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cfgg-fgjt-z3hn"},{"vulnerability":"VCID-d5q3-jrdb-euav"},{"vulnerability":"VCID-dc9y-v257-6bhf"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-ff5q-59gf-nugg"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-ftdr-uzuh-8ybc"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-gme6-wj87-ekfw"},{"vulnerability":"VCID-jx5m-bqc6-h3bv"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kd3t-2gzd-q3hq"},{"vulnerability":"VCID-kgm4-g26x-gken"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-kxyq-vg6e-6uac"},{"vulnerability":"VCID-m8w1-g9h9-vuce"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-p554-wkxw-gfdh"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qak9-2t7g-w3fv"},{"vulnerability":"VCID-qjgf-hxng-j3g9"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ua49-snhx-dqa4"},{"vulnerability":"VCID-w4fh-cpaq-nqat"},{"vulnerability":"VCID-xnb4-zjws-vuhu"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/184881?format=json","purl":"pkg:composer/silverstripe/framework@4.0.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1nes-cr3m-j3dv"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c75p-3hdz-q3b6"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cfgg-fgjt-z3hn"},{"vulnerability":"VCID-d5q3-jrdb-euav"},{"vulnerability":"VCID-dc9y-v257-6bhf"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-ff5q-59gf-nugg"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-ftdr-uzuh-8ybc"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-gme6-wj87-ekfw"},{"vulnerability":"VCID-jx5m-bqc6-h3bv"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kd3t-2gzd-q3hq"},{"vulnerability":"VCID-kgm4-g26x-gken"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-kxyq-vg6e-6uac"},{"vulnerability":"VCID-m8w1-g9h9-vuce"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-p554-wkxw-gfdh"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qak9-2t7g-w3fv"},{"vulnerability":"VCID-qjgf-hxng-j3g9"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ua49-snhx-dqa4"},{"vulnerability":"VCID-w4fh-cpaq-nqat"},{"vulnerability":"VCID-xnb4-zjws-vuhu"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/184882?format=json","purl":"pkg:composer/silverstripe/framework@4.0.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1nes-cr3m-j3dv"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-b9th-m3ys-7bat"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c75p-3hdz-q3b6"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cfgg-fgjt-z3hn"},{"vulnerability":"VCID-d5q3-jrdb-euav"},{"vulnerability":"VCID-dc9y-v257-6bhf"},{"vulnerability":"VCID-dgke-xzhn-dkg5"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-ff5q-59gf-nugg"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-ftdr-uzuh-8ybc"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-gme6-wj87-ekfw"},{"vulnerability":"VCID-jx5m-bqc6-h3bv"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kd3t-2gzd-q3hq"},{"vulnerability":"VCID-kgm4-g26x-gken"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-kxyq-vg6e-6uac"},{"vulnerability":"VCID-m8w1-g9h9-vuce"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-p554-wkxw-gfdh"},{"vulnerability":"VCID-pffp-vtk7-pqby"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qak9-2t7g-w3fv"},{"vulnerability":"VCID-qjgf-hxng-j3g9"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ua49-snhx-dqa4"},{"vulnerability":"VCID-w4fh-cpaq-nqat"},{"vulnerability":"VCID-xnb4-zjws-vuhu"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.3"},{"url":"http://public2.vulnerablecode.io/api/packages/145601?format=json","purl":"pkg:composer/silverstripe/framework@4.1.0-rc1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1nes-cr3m-j3dv"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-b9th-m3ys-7bat"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c75p-3hdz-q3b6"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cfgg-fgjt-z3hn"},{"vulnerability":"VCID-d5q3-jrdb-euav"},{"vulnerability":"VCID-dc9y-v257-6bhf"},{"vulnerability":"VCID-dgke-xzhn-dkg5"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-ff5q-59gf-nugg"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-ftdr-uzuh-8ybc"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-gme6-wj87-ekfw"},{"vulnerability":"VCID-jx5m-bqc6-h3bv"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kd3t-2gzd-q3hq"},{"vulnerability":"VCID-kgm4-g26x-gken"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-kxyq-vg6e-6uac"},{"vulnerability":"VCID-m8w1-g9h9-vuce"},{"vulnerability":"VCID-p554-wkxw-gfdh"},{"vulnerability":"VCID-pffp-vtk7-pqby"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qak9-2t7g-w3fv"},{"vulnerability":"VCID-qjgf-hxng-j3g9"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ua49-snhx-dqa4"},{"vulnerability":"VCID-w4fh-cpaq-nqat"},{"vulnerability":"VCID-xnb4-zjws-vuhu"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.1.0-rc1"},{"url":"http://public2.vulnerablecode.io/api/packages/193720?format=json","purl":"pkg:composer/silverstripe/framework@4.1.0-rc2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1nes-cr3m-j3dv"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-b9th-m3ys-7bat"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c75p-3hdz-q3b6"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cfgg-fgjt-z3hn"},{"vulnerability":"VCID-d5q3-jrdb-euav"},{"vulnerability":"VCID-dc9y-v257-6bhf"},{"vulnerability":"VCID-dgke-xzhn-dkg5"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-ff5q-59gf-nugg"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-ftdr-uzuh-8ybc"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-gme6-wj87-ekfw"},{"vulnerability":"VCID-jx5m-bqc6-h3bv"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kd3t-2gzd-q3hq"},{"vulnerability":"VCID-kgm4-g26x-gken"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-kxyq-vg6e-6uac"},{"vulnerability":"VCID-m8w1-g9h9-vuce"},{"vulnerability":"VCID-p554-wkxw-gfdh"},{"vulnerability":"VCID-pffp-vtk7-pqby"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qak9-2t7g-w3fv"},{"vulnerability":"VCID-qjgf-hxng-j3g9"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ua49-snhx-dqa4"},{"vulnerability":"VCID-w4fh-cpaq-nqat"},{"vulnerability":"VCID-xnb4-zjws-vuhu"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.1.0-rc2"},{"url":"http://public2.vulnerablecode.io/api/packages/35957?format=json","purl":"pkg:composer/silverstripe/framework@4.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1nes-cr3m-j3dv"},{"vulnerability":"VCID-2rbk-47h6-d7d8"},{"vulnerability":"VCID-4f9c-aun4-wfep"},{"vulnerability":"VCID-4x32-t75c-u3bj"},{"vulnerability":"VCID-5pkg-j4wg-7fcn"},{"vulnerability":"VCID-658d-vmwt-f7e8"},{"vulnerability":"VCID-6du5-hdvd-fueb"},{"vulnerability":"VCID-6epx-c68d-d7bv"},{"vulnerability":"VCID-7dk3-gcup-2kc9"},{"vulnerability":"VCID-86yd-4mkt-hydr"},{"vulnerability":"VCID-a3yc-fxa1-gfhy"},{"vulnerability":"VCID-ajga-3b99-yugh"},{"vulnerability":"VCID-axxx-gpfn-mqc9"},{"vulnerability":"VCID-b9th-m3ys-7bat"},{"vulnerability":"VCID-bdcq-z11u-zyh5"},{"vulnerability":"VCID-c75p-3hdz-q3b6"},{"vulnerability":"VCID-cdgj-bdpy-ukak"},{"vulnerability":"VCID-cfgg-fgjt-z3hn"},{"vulnerability":"VCID-d5q3-jrdb-euav"},{"vulnerability":"VCID-dc9y-v257-6bhf"},{"vulnerability":"VCID-dgke-xzhn-dkg5"},{"vulnerability":"VCID-enkd-4y44-4ueq"},{"vulnerability":"VCID-ff5q-59gf-nugg"},{"vulnerability":"VCID-fpb7-5pwu-tyg5"},{"vulnerability":"VCID-ftdr-uzuh-8ybc"},{"vulnerability":"VCID-fyxa-vzeq-ubeq"},{"vulnerability":"VCID-gme6-wj87-ekfw"},{"vulnerability":"VCID-jx5m-bqc6-h3bv"},{"vulnerability":"VCID-kak1-btjp-kqgz"},{"vulnerability":"VCID-kd3t-2gzd-q3hq"},{"vulnerability":"VCID-kgm4-g26x-gken"},{"vulnerability":"VCID-kvhv-9fj5-7kgk"},{"vulnerability":"VCID-kw9p-5fbc-hudg"},{"vulnerability":"VCID-kxa8-dmva-ayff"},{"vulnerability":"VCID-kxyq-vg6e-6uac"},{"vulnerability":"VCID-m8w1-g9h9-vuce"},{"vulnerability":"VCID-p2kq-rkh6-ayeu"},{"vulnerability":"VCID-p554-wkxw-gfdh"},{"vulnerability":"VCID-pffp-vtk7-pqby"},{"vulnerability":"VCID-pq29-qe7h-tkcp"},{"vulnerability":"VCID-qak9-2t7g-w3fv"},{"vulnerability":"VCID-qjgf-hxng-j3g9"},{"vulnerability":"VCID-qm38-1cwk-b3hq"},{"vulnerability":"VCID-tc2y-zrea-vyb2"},{"vulnerability":"VCID-u49v-31sv-eqc3"},{"vulnerability":"VCID-ua49-snhx-dqa4"},{"vulnerability":"VCID-w4fh-cpaq-nqat"},{"vulnerability":"VCID-xnb4-zjws-vuhu"},{"vulnerability":"VCID-yuer-yn1w-q3gw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.1.0"}],"references":[{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2018-012-1.yaml","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2018-012-1.yaml"},{"reference_url":"https://github.com/silverstripe/silverstripe-framework","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/silverstripe/silverstripe-framework"},{"reference_url":"https://github.com/silverstripe/silverstripe-framework/commit/5b7eca2b6327556e2d5ad31bb00511b187e5992a","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/silverstripe/silverstripe-framework/commit/5b7eca2b6327556e2d5ad31bb00511b187e5992a"},{"reference_url":"https://www.silverstripe.org/download/security-releases/ss-2018-012","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.silverstripe.org/download/security-releases/ss-2018-012"},{"reference_url":"https://github.com/advisories/GHSA-f43j-8hq4-2xj9","reference_id":"GHSA-f43j-8hq4-2xj9","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-f43j-8hq4-2xj9"}],"weaknesses":[{"cwe_id":20,"name":"Improper Input Validation","description":"The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."}],"exploits":[],"severity_range_score":"4.0 - 6.9","exploitability":"0.5","weighted_severity":"6.2","risk_score":3.1,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-xnb4-zjws-vuhu"}