Search for packages
| purl | pkg:composer/silverstripe/cms@3.1.0-rc3 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-fh35-p8ph-p545
Aliases: CVE-2015-5062 |
Silverstripe CMS Open Redirect Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to … | There are no reported fixed by versions. |
|
GHSA-2pw2-qpcp-m47x
Aliases: CVE-2020-9311 |
Silverstripe CMS XSS Vulnerability In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can … | There are no reported fixed by versions. |
|
GHSA-h77w-655f-6j3m
Aliases: CVE-2020-9309 |
Silverstripe CMS malicious file upload enables script execution Silverstripe CMS through 4.5 can be susceptible to script execution from malicious … | There are no reported fixed by versions. |
|
GHSA-gm5x-hpmw-xpxg
Aliases: CVE-2020-6164 |
Silverstripe CMS information disclosure In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can … | There are no reported fixed by versions. |
|
SS-2015-028
|
Missing security check on dev/build/defaults The `buildDefaults` method on `DevelopmentAdmin` is missing a permission check. In live mode, if you … |
Vulnerable Vulnerable Vulnerable |
|
SS-2015-023
|
Advanced workflow member field exposure By default, the CMS Admin editable template for the NotifyUsers action has access to a … |
Vulnerable |
|
SS-2016-002
|
CSRF vulnerability in GridFieldAddExistingAutocompleter GridField does not have sufficient CSRF protection, meaning that in some cases users with CMS access … |
Vulnerable Vulnerable Vulnerable |
|
SS-2016-003
|
Hostname, IP and Protocol Spoofing through HTTP Headers In it's default configuration, SilverStripe trusts all originating IPs to include HTTP … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2019-12204
Aliases: GHSA-cg8j-8w52-735v |
Missing warning can lead to unauthenticated admin access in SilverStripe In SilverStripe through 4.3.3, a missing warning about leaving install.php … |
Vulnerable |
|
GHSA-j696-6m57-mcrv
Aliases: CVE-2017-14498 |
Silverstripe CMS XSS Vulnerability SilverStripe CMS before 3.6.1 has XSS via an SVG document that is mishandled by (1) the … |
Vulnerable Vulnerable |
|
GHSA-gvc8-xjfp-6569
Aliases: CVE-2015-8606 |
Silverstripe CMS XSS Vulnerability Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe CMS & Framework before 3.1.16 and 3.2.0 before 3.2.1 … |
Vulnerable Vulnerable |
|
GHSA-fwhr-g5r4-xgxf
Aliases: CVE-2017-12849 |
Silverstripe CMS User Enumeration Response discrepancy in the login and password reset forms in SilverStripe CMS before 3.5.5 and 3.6.x … |
Vulnerable Vulnerable |
|
GHSA-xmjh-wjc5-wg4h
Aliases: CVE-2017-5197 |
Silverstripe CMS XSS Vulnerability There is XSS in SilverStripe CMS before 3.4.4 and 3.5.x before 3.5.2. The attack vector is … |
Vulnerable Vulnerable |
|
GHSA-w3cp-g2pf-65wh
Aliases: CVE-2026-54717 |
Silverstripe: XSS in breadcrumbs in page list view ### Impact Page breadcrumbs in the CMS are vulnerable to XSS when … |
Not vulnerable |