VulnerableCode Package Details - pkg:composer/silverstripe/framework@3.1.2-rc1

Vulnerabilities affecting this package (101)

Advisory	Summary	Fixed in package version
GHSA-rhx4-hvx9-j387 Aliases: CVE-2025-30148	Silverstripe Framework has a XSS vulnerability in HTML editor ### Impact A bad actor with access to edit content in …	5.3.23 Vulnerable
GHSA-74j9-xhqr-6qv3	Reflected Cross Site Scripting (XSS) in error message If a website has been set to the "dev" environment mode, a …	5.3.8 Vulnerable
GHSA-7cmp-cgg8-4c82 Aliases: CVE-2024-47605	Silverstripe Framework has a XSS via insert media remote file oembed ### Impact When using the "insert media" functionality, the …	5.3.8 Vulnerable
GHSA-mqf3-qpc3-g26q	Silverstripe Framework has a Reflected Cross Site Scripting (XSS) in error message > [!IMPORTANT] > This vulnerability only affects sites …	5.3.8 Vulnerable
GHSA-ff6q-3c9c-6cf5 Aliases: CVE-2024-53277	Silverstripe Framework has a XSS in form messages In some cases, form messages can contain HTML markup. This is an …	5.3.8 Vulnerable
GHSA-32m2-9f76-4gv8 Aliases: CVE-2022-0227	Business Logic Errors in SilverStripe Framework SilverStripe Framework prior to version 4.10.1 is vulnerable to business logic errors.	4.10.1 Vulnerable
GHSA-rfvw-5848-gxc5 Aliases: CVE-2019-12205	Silverstripe Flash Clipboard Reflected XSS SilverStripe versions 3.0.0 until 4.3.5 and 4.4.4 are vulnerable to Flash Clipboard Reflected XSS. Versions …	4.3.5 Vulnerable
GHSA-fh35-p8ph-p545 Aliases: CVE-2015-5062	Silverstripe CMS Open Redirect Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to …	There are no reported fixed by versions.
GHSA-2pw2-qpcp-m47x Aliases: CVE-2020-9311	Silverstripe CMS XSS Vulnerability In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can …	3.7.5 Vulnerable
GHSA-q9ff-3q93-fm8m Aliases: CVE-2019-19326	SilverStripe Web Cache Poisoning through HTTPRequestBuilder SilverStripe through 4.4.4 allows Web Cache Poisoning through HTTPRequestBuilder.	3.7.5 Vulnerable
GHSA-5fr8-xhqq-4p3q Aliases: CVE-2019-12246	SilverStripe Denial of Service on flush and development URL tools SilverStripe before 4.4.0 allows a Denial of Service on flush …	There are no reported fixed by versions.
GHSA-7mv4-4xpg-xq44 Aliases: CVE-2020-26138	FormField with square brackets in field name skips validation FileField with array notation skips validation The FileField class is commonly …	4.7.4 Vulnerable
GHSA-jvx5-rm6q-gx7p Aliases: CVE-2019-12245	Lack of access control on upoaded files SilverStripe through 4.3.3 has incorrect access control for protected files uploaded via Upload::loadIntoFile(). …	3.6.8 Vulnerable
GHSA-hq4p-5mpr-jj9m	Silverstripe XSS in dev/build returnURL Parameter A XSS risk exists in the returnURL parameter passed to dev/build. An unvalidated url …	3.1.14 Vulnerable
GHSA-88jp-9jrv-6368	Silverstripe XSS In GridField print A cross-site scripting vulnerability has been discovered in the print view of GridField. This vulnerability …	3.1.10 Vulnerable
GHSA-25gq-jvx2-vg9x	Silverstripe X-Forwarded-Host request hostname injection A potential hostname injection vulnerability has been found which could allow attackers to alter url …	3.1.13 Vulnerable
GHSA-qp29-wcc2-vmpc	Silverstripe HtmlEditor embed url sanitisation "Add from URL" doesn't clearly sanitise URL server side HtmlEditorField_Toolbar has an action HtmlEditorField_Toolbar#viewfile, which …	3.2.1 Vulnerable
GHSA-j982-5jv7-v43r	Silverstripe Form field validation message XSS vulnerability A high level XSS risk has been identified in the encoding of validation …	3.1.16 Vulnerable
GHSA-r85g-7jpv-8xrx	silverstripe/framework has Cross-site Scripting vulnerability in CMSSecurity BackURL In follow up to [SS-2016-001](https://www.silverstripe.org/download/security-releases/ss-2016-001/) there is yet a minor unresolved fix …	3.1.21 Vulnerable
GHSA-97jm-g33h-f46g	silverstripe/framework ReadOnly transformation for formfields exploitable Form fields returning isReadonly() as true are vulnerable to reflected XSS injections. This includes …	3.1.21 Vulnerable
GHSA-jqp8-v74p-g8px	Silverstripe XSS in Director::force_redirect() A low level XSS vulnerability has been found in the Framework affecting http redirection via the …	3.1.12 Vulnerable
GHSA-g43w-98wp-m694	SilverStripe framework XML Quadratic Blowup Attack A low level vulnerability has been found in the SilverStripe framework, where the Quadratic …	3.1.12 Vulnerable
GHSA-mqf5-275h-gf6r	Silverstripe framework is vulnerable to XSS in install.php During installation, certain parameters (admin_username and admin_password) are not escaped in the …	3.1.14 Vulnerable
GHSA-chx7-9x8h-r5mg Aliases: CVE-2024-32981	Silverstripe Framework has a Cross-site Scripting vulnerability with encoded payload ### Impact A bad actor with access to edit content …	5.2.16 Vulnerable
GHSA-52cw-pvq9-9m5v	Silverstripe uses TinyMCE which allows svg files linked in object tags ### Impact TinyMCE v6 has a configuration value `convert_unsafe_embeds` …	5.2.16 Vulnerable
GHSA-qm2j-qvq3-j29v Aliases: CVE-2023-48714	Record titles for restricted records can be viewed if exposed by GridFieldAddExistingAutocompleter ### Impact If a user should not be …	4.13.39 Vulnerable
GHSA-fw84-xgm8-9jmv Aliases: CVE-2023-22729	Open redirect vulnerability on CMSSecurity relogin screen An attacker can display a link to a third party website on a …	4.12.5 Vulnerable
GHSA-jh3w-6jp2-vqqm Aliases: CVE-2023-22728	Missing permission check of canView in GridFieldPrintButton The GridField print view incorrectly validates the permission of DataObjects potentially allowing a …	4.12.5 Vulnerable
GHSA-36xx-7vf6-7mv3 Aliases: CVE-2023-32302	Silverstripe Framework: Members with no password can be created and bypass custom login forms When a new `Member` record was …	4.13.14 Vulnerable
SS-2015-009-1	Cross-site Scripting XSS In rewritten hash links.	3.0.13 Vulnerable 3.1.12 Vulnerable
SS-2016-010	ReadOnly transformation for formfields exploitable Form fields returning `isReadonly()` as true are vulnerable to reflected XSS injections. This includes `ReadonlyField`, …	3.4.2 Vulnerable 3.2.6 Vulnerable 3.1.21 Vulnerable 3.3.4 Vulnerable
SS-2015-026	XSS vulnerability in form field validation A high level XSS risk has been identified in the encoding of validation messages …	3.2.1 Vulnerable 3.1.16 Vulnerable
SS-2016-003-1	SS-2016-003: Hostname, IP and Protocol Spoofing through HTTP Headers	3.1.17 Vulnerable 3.3.0 Vulnerable
SS-2015-028-1	Improper Authentication 'Missing security check on `dev/build/defaults`.	3.1.17 Vulnerable 3.3.0 Vulnerable
SS-2015-014-1	Code Injection Vulnerability on `isDev`, `isTest` and `flush` `$_GET` validation.	3.1.13 Vulnerable 3.0.14 Vulnerable
SS-2015-010-1	Cross-site Scripting XSS in `Director::force_redirect()`.	3.1.12 Vulnerable
CVE-2020-26138	Improper Input Validation In SilverStripe, a FormField with square brackets in the field name skips validation.	4.6.0 Vulnerable
CVE-2019-12203	Session Fixation SilverStripe allows session fixation in the "change password" form.	4.3.4 Vulnerable
SS-2015-011-1	Potential SQL Injection Vulnerability in silverstripe.	3.1.13 Vulnerable 3.0.14 Vulnerable
SS-2015-016-1	Cross-site Scripting XSS in `install.php`.	3.1.14 Vulnerable
CVE-2019-12617	Improper Privilege Management In SilverStripe, there is access escalation for CMS users with limited access through permission cache pollution.	4.3.4 Vulnerable
SS-2016-014	Pre-existing alc_enc cookies log users in if remember me is disabled If remember me is on and users log in …	3.1.20 Vulnerable 3.2.5 Vulnerable 3.3.3 Vulnerable 3.4.1 Vulnerable
SS-2016-001	XSS in CMSController BackURL A XSS risk exists in the returnURL parameter passed to CMSSecurity/success. An unvalidated url could cause …	3.1.19-rc1 Vulnerable 3.2.4-rc1 Vulnerable 3.3.2-rc1 Vulnerable 3.3.2 Vulnerable 3.1.19 Vulnerable 3.2.4 Vulnerable
CVE-2019-12246	Uncontrolled Resource Consumption SilverStripe allows a Denial of Service on flush and development URL tools.	4.3.4 Vulnerable
SS-2014-017-1	Uncontrolled Resource Consumption XML Quadratic Blowup vulnerability.	3.1.12 Vulnerable
CVE-2022-37421	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Silverstripe silverstripe/cms through 4.11.0 allows XSS.	4.11.3 Vulnerable
SS-2016-016	XSS In CMSSecurity BackURL In follow up to SS-2016-001 there is yet a minor unresolved fix to incorrectly encoded URL.	3.4.2 Vulnerable 3.2.6 Vulnerable 3.1.21 Vulnerable 3.3.4 Vulnerable
CVE-2019-12245	Information Exposure SilverStripe has incorrect access control for protected files uploaded via `Upload::loadIntoFile()`. An attacker may be able to guess …	4.3.4 Vulnerable
CVE-2020-25817	Improper Restriction of XML External Entity Reference SilverStripe has an XXE Vulnerability in CSSContentParser. A developer utility meant for parsing …	4.6.0 Vulnerable
SS-2016-008	Password encryption salt expiry When a user changes their password, the internal salt used for hashing their password is not …	3.1.20 Vulnerable 3.2.5 Vulnerable 3.3.3 Vulnerable 3.4.1 Vulnerable
SS-2016-006	Missing CSRF protection in login form `LoginForm` calls `disableSecurityToken()`, which causes a "shared host domain" vulnerability.	3.1.19-rc1 Vulnerable 3.2.4-rc1 Vulnerable 3.3.2-rc1 Vulnerable 3.3.2 Vulnerable 3.1.19 Vulnerable 3.2.4 Vulnerable
SS-2015-027	Insufficient sanitization in "Add from URL" "Add from URL" does not clearly sanitize URL server side in `HtmlEditorField_Toolbar`. The current …	3.2.1 Vulnerable
SS-2015-004-1	Cross-site Scripting TreeDropdownField and TreeMultiSelectField XSS.	3.1.10 Vulnerable
CVE-2019-14273	Files or Directories Accessible to External Parties In SilverStripe, there is broken access control on files.	4.0.1 Vulnerable
SS-2015-006-1	Cross-site Scripting XSS In GridField print.	3.1.10 Vulnerable
CVE-2021-36150	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') SilverStripe Framework allows XSS.	4.9.0 Vulnerable
CVE-2017-18049	Injection Vulnerability In the CSV export feature of SilverStripe, it is possible for the output to contain macros and scripts, …	3.5.6 Vulnerable 3.6.3 Vulnerable 4.0.1 Vulnerable
SS-2016-004	XSS in CMS Edit Page Due to a lack of parameter sanitisation a carefully crafted URL could be used to …	3.1.19-rc1 Vulnerable 3.2.4-rc1 Vulnerable 3.3.2-rc1 Vulnerable 3.3.2 Vulnerable 3.1.19 Vulnerable 3.2.4 Vulnerable
SS-2015-027-1	Improper Input Validation `HtmlEditor` improper URL sanitisation.	3.2.1 Vulnerable
CVE-2019-12205	Cross-site Scripting SilverStripe has Flash Clipboard Reflected XSS.	4.3.4 Vulnerable
SS-2016-015	XSS In OptionsetField and CheckboxSetField List of key / value pairs assigned to `OptionsetField` or `CheckboxSetField` do not have a …	3.1.20 Vulnerable 3.2.5 Vulnerable 3.3.3 Vulnerable 3.4.1 Vulnerable
SS-2015-020	Privilege Escalation A member with the permission EDIT_PERMISSIONS is able to re-assign themselves (or another member) to ADMIN level.	3.1.14 Vulnerable
SS-2015-007-1	Cross-site Scripting XSS In FormAction.	3.1.10 Vulnerable
CVE-2021-41559 Aliases: GHSA-9fmg-89fx-r33w	Quadratic blowup in Convert::xml2array() Silverstripe silverstripe/framework has a quadratic blowup in Convert::xml2array() that enables a remote attack via a crafted …	4.10.9 Vulnerable
SS-2016-002-1	Cross-Site Request Forgery (CSRF) CSRF vulnerability in `GridFieldAddExistingAutocompleter`.	3.1.17 Vulnerable 3.3.0 Vulnerable
SS-2015-012-1	URL Redirection to Untrusted Site (Open Redirect) External redirection risk in `Security?ReturnURL`.	3.1.13 Vulnerable 3.0.14 Vulnerable
CVE-2017-14498	Cross-site Scripting SilverStripe CMS has an XSS via an SVG document that is mishandled by (1) the Insert Media option …	3.6.1 Vulnerable
SS-2015-015-1	Cross-site Scripting XSS in `dev/build` `returnURL` Parameter.	3.1.14 Vulnerable
CVE-2019-14272	Cross-site Scripting In SilverStripe asset-admin, there is XSS in file titles managed through the CMS.	4.0.1 Vulnerable
SS-2016-011	ChangePasswordForm doesn't check Member::canLogIn() After performing a password reset, `ChangePasswordForm::doChangePassword()` logs in the user without checking `Member::canLogIn()`. This presents an …	3.2.5 Vulnerable 3.3.3 Vulnerable
SS-2016-013	Member.Name isn't escaped The core template `framework/templates/Includes/GridField_print.ss` uses "Printed by $Member.Name". If the currently logged in members first name or …	3.1.20 Vulnerable 3.2.5 Vulnerable 3.3.3 Vulnerable 3.4.1 Vulnerable
CVE-2017-5197	Cross-site Scripting There is an XSS in SilverStripe CMS.	3.4.4 Vulnerable 3.5.2 Vulnerable
CVE-2017-12849	Information Exposure Response discrepancy in the login and password reset forms in SilverStripe CMS allows remote attackers to enumerate users …	3.5.5 Vulnerable 3.6.1 Vulnerable
CVE-2019-12437	Cross-Site Request Forgery (CSRF) SilverStripe is vulnerable to CSRF in GraphQL mutations	4.3.4 Vulnerable
SS-2016-012	Missing ACL on reports The `SS_Report`, and the reports CMS section only checks `canView()` when listing the reports that can …	3.1.20 Vulnerable 3.2.5 Vulnerable 3.3.3 Vulnerable 3.4.1 Vulnerable
SS-2015-029	CSRF vulnerability in savetreenodes `savetreenode` action does not have sufficient CSRF protection, meaning that in some cases users with CMS …	3.1.19-rc1 Vulnerable 3.2.4-rc1 Vulnerable 3.3.2-rc1 Vulnerable 3.3.2 Vulnerable 3.1.19 Vulnerable 3.2.4 Vulnerable
SS-2014-015-1	IE requests issue IE requests not properly behaving with `rewritehashlinks`.	3.0.13 Vulnerable 3.1.12 Vulnerable
CVE-2021-28661	Incorrect Authorization Default SilverStripe GraphQL Server (aka silverstripe/graphql) permission checker is not inherited by query subclass.	3.5.2 Vulnerable
SS-2015-013-1	Improper Neutralization of HTTP Headers for Scripting Syntax `X-Forwarded-Host` request hostname injection.	3.1.13 Vulnerable
SS-2015-026-1	Cross-site Scripting Form field validation message XSS vulnerability.	3.2.1 Vulnerable
SS-2017-001	XSS In page name SilverStripe is vulnerable to XSS via the page name. For instance, page name `"><svg/onload=alert(/xss/)>` will trigger …	3.5.2-rc1 Vulnerable 3.4.4-rc1 Vulnerable
SS-2016-005	Brute force bypass on default admin Default Administrator accounts were not subject to the same brute force protection afforded to …	3.1.19-rc1 Vulnerable 3.2.4-rc1 Vulnerable 3.3.2-rc1 Vulnerable 3.3.2 Vulnerable 3.1.19 Vulnerable 3.2.4 Vulnerable
CVE-2020-26136	Improper Authentication In SilverStripe, GraphQL does not honour MFA (multi-factor authentication) when using basic authentication.	4.6.0 Vulnerable
GHSA-wvfw-w3x6-g526 Aliases: CVE-2019-5715	Silverstripe Framework SQLi Vulnerability All versions of SilverStripe 3 prior to 3.6.7 and 3.7.3, and all versions of SilverStripe 4 …	3.6.7 Vulnerable 3.6.7 Vulnerable
GHSA-2jvj-mhf2-g99w Aliases: CVE-2017-18049	SilverStripe CSV Excel Macro Injection In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before …	3.5.6 Vulnerable 3.5.6 Vulnerable
CVE-2023-32302 Aliases: GHSA-36xx-7vf6-7mv3	Improper Input Validation Silverstripe Framework is the MVC framework that powers Silverstripe CMS. When a new member record is created …	5.0.13 Vulnerable 4.13.14 Vulnerable 5.0.13 Vulnerable 4.13.14 Vulnerable
GHSA-r32j-mr8p-hfp8	Silverstripe XSS in TreeDropdownField and TreeMultiSelectField A cross-site scripting vulnerability has been discovered in the TreeDropdownField and TreeMultiSelectField. This vulnerability …	3.1.10 Vulnerable 3.1.10 Vulnerable
GHSA-2hpc-mf4q-j885	Silverstripe CSRF vulnerability in GridFieldAddExistingAutocompleter GridField does not have sufficient CSRF protection, meaning that in some cases users with CMS …	3.1.17 Vulnerable 3.2.2 Vulnerable 3.3.0 Vulnerable 3.1.17 Vulnerable 3.2.2 Vulnerable 3.3.0 Vulnerable
GHSA-87pf-7x99-5xc4	Silverstripe Hostname, IP and Protocol Spoofing through HTTP Headers In it's default configuration, SilverStripe trusts all originating IPs to include …	3.1.17 Vulnerable 3.2.2 Vulnerable 3.3.0 Vulnerable 3.1.17 Vulnerable 3.2.2 Vulnerable 3.3.0 Vulnerable
GHSA-4h54-vwx9-3vr3	Silverstripe XSS In FormAction A cross-site scripting vulnerability has been discovered in the FormAction field where a user-specified title may …	3.1.10 Vulnerable 3.1.10 Vulnerable
GHSA-x5w2-wcr8-9q45	Silverstripe Missing security check on dev/build/defaults The buildDefaults method on DevelopmentAdmin is missing a permission check. In live mode, if …	3.1.17 Vulnerable 3.2.2 Vulnerable 3.3.0 Vulnerable 3.1.17 Vulnerable 3.2.2 Vulnerable 3.3.0 Vulnerable
GHSA-gvrw-qqp5-jgc5 Aliases: CVE-2026-54720	Silverstripe Framework: Possible XSS attack through media embed ### Impact The "Insert media from web" functionality in the CMS is …	6.2.2 Not vulnerable
GHSA-4h54-vwx9-3vr3	Silverstripe XSS In FormAction A cross-site scripting vulnerability has been discovered in the FormAction field where a user-specified title may …	3.1.10 Vulnerable 3.1.10 Vulnerable
GHSA-5f5v-5c3v-gw5v	Silverstripe IE requests not properly behaving with rewritehashlinks Non IE browsers don’t appear to be affected, but I haven’t tested …	3.1.12 Vulnerable 3.1.12 Vulnerable
GHSA-34q6-xqxh-gq39	Silverstripe XSS In rewritten hash links A high level XSS vulnerability has been discovered in the SilverStripe framework which causes …	3.1.12 Vulnerable 3.1.12 Vulnerable
GHSA-2hpc-mf4q-j885	Silverstripe CSRF vulnerability in GridFieldAddExistingAutocompleter GridField does not have sufficient CSRF protection, meaning that in some cases users with CMS …	3.1.17 Vulnerable 3.2.2 Vulnerable 3.3.0 Vulnerable 3.1.17 Vulnerable
GHSA-r32j-mr8p-hfp8	Silverstripe XSS in TreeDropdownField and TreeMultiSelectField A cross-site scripting vulnerability has been discovered in the TreeDropdownField and TreeMultiSelectField. This vulnerability …	3.1.10 Vulnerable 3.1.10 Vulnerable
GHSA-87pf-7x99-5xc4	Silverstripe Hostname, IP and Protocol Spoofing through HTTP Headers In it's default configuration, SilverStripe trusts all originating IPs to include …	3.1.17 Vulnerable 3.2.2 Vulnerable 3.1.17 Vulnerable
GHSA-g4hp-pfvf-vm5w	SilverStripe Vulnerability on 'isDev', 'isTest' and 'flush' $_GET validation When a secure token parameter is provided to a SilverStripe site …	3.1.13 Vulnerable 3.1.13 Vulnerable
GHSA-vp8p-c6xj-xpj7	Silverstripe External redirection risk in Security?ReturnURL A vulnerability has been found in the SilverStripe framework where a login url can …	3.1.13 Vulnerable 3.1.13 Vulnerable
GHSA-x5w2-wcr8-9q45	Silverstripe Missing security check on dev/build/defaults The buildDefaults method on DevelopmentAdmin is missing a permission check. In live mode, if …	3.1.17 Vulnerable 3.2.2 Vulnerable 3.1.17 Vulnerable

Next non-vulnerable version	6.2.2
Latest non-vulnerable version	6.2.2
Risk score	9.8