silverstripe

Records98All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

silverstripe records in CISA KEV

No silverstripe vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Silverstripe 64 records MEDIUM Framework 15 records MEDIUM Graphql 3 records MEDIUM Assets 2 records LOW Admin 1 record LOW Asset Admin 1 record LOW Mimevalidator 1 record MEDIUM Recipe 1 record MEDIUM

Records

2 records in Assets · all components

TI-2022-18248 CVE-2022-38724 · GHSA-9cx2-hj6m-fv58

Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0…

LOW 26

Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0, and silverstripe/asset-admin through 1.11.0 allow XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00709 Published 2022-11-22 Fixed in 1.11.1, 4.11.13 CWE-79

TI-2022-12217 CVE-2022-29858 · GHSA-v68g-62v9-39w5

Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control…

LOW 23

Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control that allows protected images to be published by changing an existing image short code on website content.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01245 Published 2022-06-28 Fixed in 1.10.1 CWE-287

Open these records in search →

Critical	4
High	13
Medium	78
Low	3
No CVSS	0