Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-5dt7-nc8t-nqgh
Summary
Cross-site Scripting
SilverStripe allows Reflected XSS on the login form and custom forms. Silverstripe Forms allow malicious HTML or JavaScript to be inserted through non-scalar `FormField` attributes, which allows performing XSS (Cross-Site Scripting) on some forms built with user input (Request data). This can lead to phishing attempts to obtain a user's credentials or other sensitive user input.
Aliases
0
alias CVE-2019-19325
1
alias GHSA-qvrv-2x7x-78x2
Fixed_packages
0
url pkg:composer/silverstripe/framework@4.4.5
purl pkg:composer/silverstripe/framework@4.4.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11sx-j3x7-gkcr
1
vulnerability VCID-1p79-328x-sueq
2
vulnerability VCID-24a5-ruc4-bycq
3
vulnerability VCID-2hk2-hzyh-wbhf
4
vulnerability VCID-5cfa-whq6-9ucp
5
vulnerability VCID-79qx-v5uu-jyf2
6
vulnerability VCID-7gak-15m5-j3f5
7
vulnerability VCID-7w7t-3783-1kbs
8
vulnerability VCID-86vg-4j71-hkgr
9
vulnerability VCID-8u5c-6vx3-mfcr
10
vulnerability VCID-9t4k-8hsz-bfdw
11
vulnerability VCID-9y5u-qyzd-3ud9
12
vulnerability VCID-a7cf-kpzy-xudd
13
vulnerability VCID-ca4q-xd4v-vqfe
14
vulnerability VCID-fmfu-81xu-pfdy
15
vulnerability VCID-gnpw-s9hp-wqfs
16
vulnerability VCID-hcuz-gz3w-97ew
17
vulnerability VCID-k46z-g6jp-57ek
18
vulnerability VCID-ky21-z2d2-sye6
19
vulnerability VCID-n4fk-735u-2baw
20
vulnerability VCID-pkve-yjqy-syc2
21
vulnerability VCID-qmfy-dxag-uuex
22
vulnerability VCID-ru3j-21j8-ayhm
23
vulnerability VCID-tv7h-289s-xub4
24
vulnerability VCID-uy47-3s8a-hbdn
25
vulnerability VCID-wgdv-etcq-3qhw
26
vulnerability VCID-xm4q-u96p-57dd
27
vulnerability VCID-ytbc-8mhd-b3fc
28
vulnerability VCID-zdge-zsmz-8ud9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.4.5
1
url pkg:composer/silverstripe/framework@4.5.0-alpha1
purl pkg:composer/silverstripe/framework@4.5.0-alpha1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11sx-j3x7-gkcr
1
vulnerability VCID-1p79-328x-sueq
2
vulnerability VCID-24a5-ruc4-bycq
3
vulnerability VCID-2hk2-hzyh-wbhf
4
vulnerability VCID-5cfa-whq6-9ucp
5
vulnerability VCID-79qx-v5uu-jyf2
6
vulnerability VCID-7gak-15m5-j3f5
7
vulnerability VCID-7w7t-3783-1kbs
8
vulnerability VCID-86vg-4j71-hkgr
9
vulnerability VCID-8u5c-6vx3-mfcr
10
vulnerability VCID-9t4k-8hsz-bfdw
11
vulnerability VCID-9y5u-qyzd-3ud9
12
vulnerability VCID-a7cf-kpzy-xudd
13
vulnerability VCID-ca4q-xd4v-vqfe
14
vulnerability VCID-fmfu-81xu-pfdy
15
vulnerability VCID-gnpw-s9hp-wqfs
16
vulnerability VCID-hcuz-gz3w-97ew
17
vulnerability VCID-k46z-g6jp-57ek
18
vulnerability VCID-ky21-z2d2-sye6
19
vulnerability VCID-n4fk-735u-2baw
20
vulnerability VCID-qmfy-dxag-uuex
21
vulnerability VCID-ru3j-21j8-ayhm
22
vulnerability VCID-tv7h-289s-xub4
23
vulnerability VCID-uy47-3s8a-hbdn
24
vulnerability VCID-wgdv-etcq-3qhw
25
vulnerability VCID-xm4q-u96p-57dd
26
vulnerability VCID-zdge-zsmz-8ud9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.5.0-alpha1
2
url pkg:composer/silverstripe/framework@4.5.2
purl pkg:composer/silverstripe/framework@4.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11sx-j3x7-gkcr
1
vulnerability VCID-1p79-328x-sueq
2
vulnerability VCID-24a5-ruc4-bycq
3
vulnerability VCID-2hk2-hzyh-wbhf
4
vulnerability VCID-5cfa-whq6-9ucp
5
vulnerability VCID-79qx-v5uu-jyf2
6
vulnerability VCID-7gak-15m5-j3f5
7
vulnerability VCID-7w7t-3783-1kbs
8
vulnerability VCID-86vg-4j71-hkgr
9
vulnerability VCID-8u5c-6vx3-mfcr
10
vulnerability VCID-9t4k-8hsz-bfdw
11
vulnerability VCID-9y5u-qyzd-3ud9
12
vulnerability VCID-a7cf-kpzy-xudd
13
vulnerability VCID-ca4q-xd4v-vqfe
14
vulnerability VCID-fmfu-81xu-pfdy
15
vulnerability VCID-gnpw-s9hp-wqfs
16
vulnerability VCID-hcuz-gz3w-97ew
17
vulnerability VCID-k46z-g6jp-57ek
18
vulnerability VCID-ky21-z2d2-sye6
19
vulnerability VCID-n4fk-735u-2baw
20
vulnerability VCID-pkve-yjqy-syc2
21
vulnerability VCID-qmfy-dxag-uuex
22
vulnerability VCID-tv7h-289s-xub4
23
vulnerability VCID-uy47-3s8a-hbdn
24
vulnerability VCID-wgdv-etcq-3qhw
25
vulnerability VCID-xm4q-u96p-57dd
26
vulnerability VCID-ytbc-8mhd-b3fc
27
vulnerability VCID-zdge-zsmz-8ud9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.5.2
3
url pkg:composer/silverstripe/framework@4.12.0-rc1
purl pkg:composer/silverstripe/framework@4.12.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11sx-j3x7-gkcr
1
vulnerability VCID-2hk2-hzyh-wbhf
2
vulnerability VCID-5cfa-whq6-9ucp
3
vulnerability VCID-79qx-v5uu-jyf2
4
vulnerability VCID-86vg-4j71-hkgr
5
vulnerability VCID-8u5c-6vx3-mfcr
6
vulnerability VCID-9y5u-qyzd-3ud9
7
vulnerability VCID-a7cf-kpzy-xudd
8
vulnerability VCID-gnpw-s9hp-wqfs
9
vulnerability VCID-k46z-g6jp-57ek
10
vulnerability VCID-ky21-z2d2-sye6
11
vulnerability VCID-zdge-zsmz-8ud9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.12.0-rc1
Affected_packages
0
url pkg:composer/silverstripe/framework@4.0.0
purl pkg:composer/silverstripe/framework@4.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11sx-j3x7-gkcr
1
vulnerability VCID-1mmc-91gk-r3d3
2
vulnerability VCID-1p79-328x-sueq
3
vulnerability VCID-24a5-ruc4-bycq
4
vulnerability VCID-2hk2-hzyh-wbhf
5
vulnerability VCID-37d1-tt74-yyfm
6
vulnerability VCID-5cfa-whq6-9ucp
7
vulnerability VCID-5dt7-nc8t-nqgh
8
vulnerability VCID-79qx-v5uu-jyf2
9
vulnerability VCID-7gak-15m5-j3f5
10
vulnerability VCID-7hxq-cp29-r7dh
11
vulnerability VCID-7w7t-3783-1kbs
12
vulnerability VCID-86vg-4j71-hkgr
13
vulnerability VCID-8u5c-6vx3-mfcr
14
vulnerability VCID-9t4k-8hsz-bfdw
15
vulnerability VCID-9y5u-qyzd-3ud9
16
vulnerability VCID-a1p9-cwzb-kbgb
17
vulnerability VCID-a7cf-kpzy-xudd
18
vulnerability VCID-aj7q-x4hc-xbdm
19
vulnerability VCID-aygc-4nhm-n7eq
20
vulnerability VCID-b6nm-cphj-wfgw
21
vulnerability VCID-ca4q-xd4v-vqfe
22
vulnerability VCID-cmwn-cjff-9qau
23
vulnerability VCID-fm87-te3v-pkc8
24
vulnerability VCID-fmfu-81xu-pfdy
25
vulnerability VCID-g7kn-gn2m-myc3
26
vulnerability VCID-gnpw-s9hp-wqfs
27
vulnerability VCID-h9g1-7wez-8qft
28
vulnerability VCID-hcuz-gz3w-97ew
29
vulnerability VCID-hq36-9ntc-akez
30
vulnerability VCID-k46z-g6jp-57ek
31
vulnerability VCID-ky21-z2d2-sye6
32
vulnerability VCID-m3us-9sft-wbh8
33
vulnerability VCID-mkex-ht2r-cucz
34
vulnerability VCID-n4fk-735u-2baw
35
vulnerability VCID-nute-ndg2-z7ev
36
vulnerability VCID-nzcm-xbxx-wyf9
37
vulnerability VCID-p2m9-rejx-e3e9
38
vulnerability VCID-pkve-yjqy-syc2
39
vulnerability VCID-qdwg-f2bx-1bay
40
vulnerability VCID-qmfy-dxag-uuex
41
vulnerability VCID-r1eg-dwej-5kau
42
vulnerability VCID-ru3j-21j8-ayhm
43
vulnerability VCID-tsdn-bu3d-ubaf
44
vulnerability VCID-tv7h-289s-xub4
45
vulnerability VCID-uy47-3s8a-hbdn
46
vulnerability VCID-wgdv-etcq-3qhw
47
vulnerability VCID-xg74-3h1h-kqaf
48
vulnerability VCID-xm4q-u96p-57dd
49
vulnerability VCID-y8et-m846-2fc6
50
vulnerability VCID-ytbc-8mhd-b3fc
51
vulnerability VCID-yxuh-bxh5-z3cw
52
vulnerability VCID-zdge-zsmz-8ud9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.0
1
url pkg:composer/silverstripe/framework@4.4.0
purl pkg:composer/silverstripe/framework@4.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11sx-j3x7-gkcr
1
vulnerability VCID-1p79-328x-sueq
2
vulnerability VCID-24a5-ruc4-bycq
3
vulnerability VCID-2hk2-hzyh-wbhf
4
vulnerability VCID-5cfa-whq6-9ucp
5
vulnerability VCID-5dt7-nc8t-nqgh
6
vulnerability VCID-79qx-v5uu-jyf2
7
vulnerability VCID-7gak-15m5-j3f5
8
vulnerability VCID-7w7t-3783-1kbs
9
vulnerability VCID-86vg-4j71-hkgr
10
vulnerability VCID-8u5c-6vx3-mfcr
11
vulnerability VCID-9t4k-8hsz-bfdw
12
vulnerability VCID-9y5u-qyzd-3ud9
13
vulnerability VCID-a7cf-kpzy-xudd
14
vulnerability VCID-b6nm-cphj-wfgw
15
vulnerability VCID-ca4q-xd4v-vqfe
16
vulnerability VCID-cmwn-cjff-9qau
17
vulnerability VCID-fmfu-81xu-pfdy
18
vulnerability VCID-gnpw-s9hp-wqfs
19
vulnerability VCID-hcuz-gz3w-97ew
20
vulnerability VCID-k46z-g6jp-57ek
21
vulnerability VCID-ky21-z2d2-sye6
22
vulnerability VCID-mkex-ht2r-cucz
23
vulnerability VCID-n4fk-735u-2baw
24
vulnerability VCID-nzcm-xbxx-wyf9
25
vulnerability VCID-pkve-yjqy-syc2
26
vulnerability VCID-qmfy-dxag-uuex
27
vulnerability VCID-ru3j-21j8-ayhm
28
vulnerability VCID-tv7h-289s-xub4
29
vulnerability VCID-uy47-3s8a-hbdn
30
vulnerability VCID-wgdv-etcq-3qhw
31
vulnerability VCID-xm4q-u96p-57dd
32
vulnerability VCID-y8et-m846-2fc6
33
vulnerability VCID-ytbc-8mhd-b3fc
34
vulnerability VCID-zdge-zsmz-8ud9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.4.0
2
url pkg:composer/silverstripe/framework@4.4.1
purl pkg:composer/silverstripe/framework@4.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11sx-j3x7-gkcr
1
vulnerability VCID-1p79-328x-sueq
2
vulnerability VCID-24a5-ruc4-bycq
3
vulnerability VCID-2hk2-hzyh-wbhf
4
vulnerability VCID-5cfa-whq6-9ucp
5
vulnerability VCID-5dt7-nc8t-nqgh
6
vulnerability VCID-79qx-v5uu-jyf2
7
vulnerability VCID-7gak-15m5-j3f5
8
vulnerability VCID-7w7t-3783-1kbs
9
vulnerability VCID-86vg-4j71-hkgr
10
vulnerability VCID-8u5c-6vx3-mfcr
11
vulnerability VCID-9t4k-8hsz-bfdw
12
vulnerability VCID-9y5u-qyzd-3ud9
13
vulnerability VCID-a7cf-kpzy-xudd
14
vulnerability VCID-ca4q-xd4v-vqfe
15
vulnerability VCID-fmfu-81xu-pfdy
16
vulnerability VCID-gnpw-s9hp-wqfs
17
vulnerability VCID-hcuz-gz3w-97ew
18
vulnerability VCID-k46z-g6jp-57ek
19
vulnerability VCID-ky21-z2d2-sye6
20
vulnerability VCID-n4fk-735u-2baw
21
vulnerability VCID-nzcm-xbxx-wyf9
22
vulnerability VCID-pkve-yjqy-syc2
23
vulnerability VCID-qmfy-dxag-uuex
24
vulnerability VCID-ru3j-21j8-ayhm
25
vulnerability VCID-tv7h-289s-xub4
26
vulnerability VCID-uy47-3s8a-hbdn
27
vulnerability VCID-wgdv-etcq-3qhw
28
vulnerability VCID-xm4q-u96p-57dd
29
vulnerability VCID-ytbc-8mhd-b3fc
30
vulnerability VCID-zdge-zsmz-8ud9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.4.1
3
url pkg:composer/silverstripe/framework@4.4.2
purl pkg:composer/silverstripe/framework@4.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11sx-j3x7-gkcr
1
vulnerability VCID-1p79-328x-sueq
2
vulnerability VCID-24a5-ruc4-bycq
3
vulnerability VCID-2hk2-hzyh-wbhf
4
vulnerability VCID-5cfa-whq6-9ucp
5
vulnerability VCID-5dt7-nc8t-nqgh
6
vulnerability VCID-79qx-v5uu-jyf2
7
vulnerability VCID-7gak-15m5-j3f5
8
vulnerability VCID-7w7t-3783-1kbs
9
vulnerability VCID-86vg-4j71-hkgr
10
vulnerability VCID-8u5c-6vx3-mfcr
11
vulnerability VCID-9t4k-8hsz-bfdw
12
vulnerability VCID-9y5u-qyzd-3ud9
13
vulnerability VCID-a7cf-kpzy-xudd
14
vulnerability VCID-ca4q-xd4v-vqfe
15
vulnerability VCID-fmfu-81xu-pfdy
16
vulnerability VCID-gnpw-s9hp-wqfs
17
vulnerability VCID-hcuz-gz3w-97ew
18
vulnerability VCID-k46z-g6jp-57ek
19
vulnerability VCID-ky21-z2d2-sye6
20
vulnerability VCID-n4fk-735u-2baw
21
vulnerability VCID-nzcm-xbxx-wyf9
22
vulnerability VCID-pkve-yjqy-syc2
23
vulnerability VCID-qmfy-dxag-uuex
24
vulnerability VCID-ru3j-21j8-ayhm
25
vulnerability VCID-tv7h-289s-xub4
26
vulnerability VCID-uy47-3s8a-hbdn
27
vulnerability VCID-wgdv-etcq-3qhw
28
vulnerability VCID-xm4q-u96p-57dd
29
vulnerability VCID-ytbc-8mhd-b3fc
30
vulnerability VCID-zdge-zsmz-8ud9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.4.2
4
url pkg:composer/silverstripe/framework@4.4.3
purl pkg:composer/silverstripe/framework@4.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11sx-j3x7-gkcr
1
vulnerability VCID-1p79-328x-sueq
2
vulnerability VCID-24a5-ruc4-bycq
3
vulnerability VCID-2hk2-hzyh-wbhf
4
vulnerability VCID-5cfa-whq6-9ucp
5
vulnerability VCID-5dt7-nc8t-nqgh
6
vulnerability VCID-79qx-v5uu-jyf2
7
vulnerability VCID-7gak-15m5-j3f5
8
vulnerability VCID-7w7t-3783-1kbs
9
vulnerability VCID-86vg-4j71-hkgr
10
vulnerability VCID-8u5c-6vx3-mfcr
11
vulnerability VCID-9t4k-8hsz-bfdw
12
vulnerability VCID-9y5u-qyzd-3ud9
13
vulnerability VCID-a7cf-kpzy-xudd
14
vulnerability VCID-ca4q-xd4v-vqfe
15
vulnerability VCID-fmfu-81xu-pfdy
16
vulnerability VCID-gnpw-s9hp-wqfs
17
vulnerability VCID-hcuz-gz3w-97ew
18
vulnerability VCID-k46z-g6jp-57ek
19
vulnerability VCID-ky21-z2d2-sye6
20
vulnerability VCID-n4fk-735u-2baw
21
vulnerability VCID-nzcm-xbxx-wyf9
22
vulnerability VCID-pkve-yjqy-syc2
23
vulnerability VCID-qmfy-dxag-uuex
24
vulnerability VCID-ru3j-21j8-ayhm
25
vulnerability VCID-tv7h-289s-xub4
26
vulnerability VCID-uy47-3s8a-hbdn
27
vulnerability VCID-wgdv-etcq-3qhw
28
vulnerability VCID-xm4q-u96p-57dd
29
vulnerability VCID-ytbc-8mhd-b3fc
30
vulnerability VCID-zdge-zsmz-8ud9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.4.3
5
url pkg:composer/silverstripe/framework@4.4.4
purl pkg:composer/silverstripe/framework@4.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11sx-j3x7-gkcr
1
vulnerability VCID-1p79-328x-sueq
2
vulnerability VCID-24a5-ruc4-bycq
3
vulnerability VCID-2hk2-hzyh-wbhf
4
vulnerability VCID-5cfa-whq6-9ucp
5
vulnerability VCID-5dt7-nc8t-nqgh
6
vulnerability VCID-79qx-v5uu-jyf2
7
vulnerability VCID-7gak-15m5-j3f5
8
vulnerability VCID-7w7t-3783-1kbs
9
vulnerability VCID-86vg-4j71-hkgr
10
vulnerability VCID-8u5c-6vx3-mfcr
11
vulnerability VCID-9t4k-8hsz-bfdw
12
vulnerability VCID-9y5u-qyzd-3ud9
13
vulnerability VCID-a7cf-kpzy-xudd
14
vulnerability VCID-ca4q-xd4v-vqfe
15
vulnerability VCID-fmfu-81xu-pfdy
16
vulnerability VCID-gnpw-s9hp-wqfs
17
vulnerability VCID-hcuz-gz3w-97ew
18
vulnerability VCID-k46z-g6jp-57ek
19
vulnerability VCID-ky21-z2d2-sye6
20
vulnerability VCID-n4fk-735u-2baw
21
vulnerability VCID-pkve-yjqy-syc2
22
vulnerability VCID-qmfy-dxag-uuex
23
vulnerability VCID-ru3j-21j8-ayhm
24
vulnerability VCID-tv7h-289s-xub4
25
vulnerability VCID-uy47-3s8a-hbdn
26
vulnerability VCID-wgdv-etcq-3qhw
27
vulnerability VCID-xm4q-u96p-57dd
28
vulnerability VCID-ytbc-8mhd-b3fc
29
vulnerability VCID-zdge-zsmz-8ud9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.4.4
6
url pkg:composer/silverstripe/framework@4.5.0
purl pkg:composer/silverstripe/framework@4.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11sx-j3x7-gkcr
1
vulnerability VCID-1p79-328x-sueq
2
vulnerability VCID-24a5-ruc4-bycq
3
vulnerability VCID-2hk2-hzyh-wbhf
4
vulnerability VCID-5cfa-whq6-9ucp
5
vulnerability VCID-5dt7-nc8t-nqgh
6
vulnerability VCID-79qx-v5uu-jyf2
7
vulnerability VCID-7gak-15m5-j3f5
8
vulnerability VCID-7w7t-3783-1kbs
9
vulnerability VCID-86vg-4j71-hkgr
10
vulnerability VCID-8u5c-6vx3-mfcr
11
vulnerability VCID-9t4k-8hsz-bfdw
12
vulnerability VCID-9y5u-qyzd-3ud9
13
vulnerability VCID-a7cf-kpzy-xudd
14
vulnerability VCID-ca4q-xd4v-vqfe
15
vulnerability VCID-fmfu-81xu-pfdy
16
vulnerability VCID-gnpw-s9hp-wqfs
17
vulnerability VCID-hcuz-gz3w-97ew
18
vulnerability VCID-k46z-g6jp-57ek
19
vulnerability VCID-ky21-z2d2-sye6
20
vulnerability VCID-n4fk-735u-2baw
21
vulnerability VCID-pkve-yjqy-syc2
22
vulnerability VCID-qmfy-dxag-uuex
23
vulnerability VCID-ru3j-21j8-ayhm
24
vulnerability VCID-tv7h-289s-xub4
25
vulnerability VCID-uy47-3s8a-hbdn
26
vulnerability VCID-wgdv-etcq-3qhw
27
vulnerability VCID-xm4q-u96p-57dd
28
vulnerability VCID-ytbc-8mhd-b3fc
29
vulnerability VCID-zdge-zsmz-8ud9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.5.0
7
url pkg:composer/silverstripe/framework@4.5.1
purl pkg:composer/silverstripe/framework@4.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11sx-j3x7-gkcr
1
vulnerability VCID-1p79-328x-sueq
2
vulnerability VCID-24a5-ruc4-bycq
3
vulnerability VCID-2hk2-hzyh-wbhf
4
vulnerability VCID-5cfa-whq6-9ucp
5
vulnerability VCID-5dt7-nc8t-nqgh
6
vulnerability VCID-79qx-v5uu-jyf2
7
vulnerability VCID-7gak-15m5-j3f5
8
vulnerability VCID-7w7t-3783-1kbs
9
vulnerability VCID-86vg-4j71-hkgr
10
vulnerability VCID-8u5c-6vx3-mfcr
11
vulnerability VCID-9t4k-8hsz-bfdw
12
vulnerability VCID-9y5u-qyzd-3ud9
13
vulnerability VCID-a7cf-kpzy-xudd
14
vulnerability VCID-ca4q-xd4v-vqfe
15
vulnerability VCID-fmfu-81xu-pfdy
16
vulnerability VCID-gnpw-s9hp-wqfs
17
vulnerability VCID-hcuz-gz3w-97ew
18
vulnerability VCID-k46z-g6jp-57ek
19
vulnerability VCID-ky21-z2d2-sye6
20
vulnerability VCID-n4fk-735u-2baw
21
vulnerability VCID-pkve-yjqy-syc2
22
vulnerability VCID-qmfy-dxag-uuex
23
vulnerability VCID-tv7h-289s-xub4
24
vulnerability VCID-uy47-3s8a-hbdn
25
vulnerability VCID-wgdv-etcq-3qhw
26
vulnerability VCID-xm4q-u96p-57dd
27
vulnerability VCID-ytbc-8mhd-b3fc
28
vulnerability VCID-zdge-zsmz-8ud9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.5.1
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-19325
reference_id
reference_type
scores
0
value 0.00359
scoring_system epss
scoring_elements 0.58427
published_at 2026-06-05T12:55:00Z
1
value 0.00359
scoring_system epss
scoring_elements 0.5838
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-19325
1
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/CVE-2019-19325.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/CVE-2019-19325.yaml
2
reference_url https://github.com/silverstripe/silverstripe-framework/commit/49fda52b12ba59f0a04bcabf78425586a8779e89
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/silverstripe/silverstripe-framework/commit/49fda52b12ba59f0a04bcabf78425586a8779e89
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-19325
reference_id CVE-2019-19325
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-19325
4
reference_url https://www.silverstripe.org/download/security-releases/cve-2019-19325
reference_id CVE-2019-19325
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.silverstripe.org/download/security-releases/cve-2019-19325
5
reference_url https://www.silverstripe.org/download/security-releases/cve-2019-19325/
reference_id CVE-2019-19325
reference_type
scores
url https://www.silverstripe.org/download/security-releases/cve-2019-19325/
6
reference_url https://github.com/advisories/GHSA-qvrv-2x7x-78x2
reference_id GHSA-qvrv-2x7x-78x2
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qvrv-2x7x-78x2
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 78
name Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
description The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-5dt7-nc8t-nqgh