Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/silverstripe/cms@3.2.0-alpha
purl pkg:composer/silverstripe/cms@3.2.0-alpha
Tags Ghost
Next non-vulnerable version 6.2.1
Latest non-vulnerable version 6.2.1
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
SS-2015-028

Missing security check on dev/build/defaults The `buildDefaults` method on `DevelopmentAdmin` is missing a permission check. In live mode, if you …
3.3.0
Vulnerable
3.2.2
Vulnerable
3.1.17
Vulnerable
SS-2016-002

CSRF vulnerability in GridFieldAddExistingAutocompleter GridField does not have sufficient CSRF protection, meaning that in some cases users with CMS access …
3.3.0
Vulnerable
3.2.2
Vulnerable
3.1.17
Vulnerable
SS-2016-003

Hostname, IP and Protocol Spoofing through HTTP Headers In it's default configuration, SilverStripe trusts all originating IPs to include HTTP …
3.3.0
Vulnerable
3.2.2
Vulnerable
3.1.17
Vulnerable
This package is not known to fix any advisories.