Read the docs
TI-2024-38737 Aliases GHSA-vp8p-c6xj-xpj7

Silverstripe External redirection risk in Security?ReturnURL

Priority LOW 38CWE-601Published · Updated

Key facts

Attack vector
—
Privileges required
—
User interaction
—
Attack complexity
—
Impact type
Spoofing
Confidentiality · integrity · availability
—
Fix status
Fixed

No CVSS vector from any source. Fix status from GitHub. Impact type from CWE-601.

Summary

A vulnerability has been found in the SilverStripe framework where a login url can be potentially redirected to an external site. For example, the url http://www.my-silverstripe-site.com/Security/login?BackURL=/\attacker-site.com will redirect successful logins to the page http://attacker-site.com. If that website were set up to look identical to the first with "login failed" then the user will likely just enter their user/pass again.

Why it matters now

Fix Fixed silverstripe/framework (Packagist): 3.0.14, 3.1.13

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—silverstripe/framework (Packagist)before 3.0.143.0.14Patch availableGHSA-vp8p-c6xj-xpj7
—silverstripe/framework (Packagist)3.1.0 to before 3.1.133.1.13Patch availableGHSA-vp8p-c6xj-xpj7
  • silverstripe/framework (Packagist) Vendor— Affected before 3.0.14 Fixed in 3.0.14 Patch available GHSA-vp8p-c6xj-xpj7
  • silverstripe/framework (Packagist) Vendor— Affected 3.1.0 to before 3.1.13 Fixed in 3.1.13 Patch available GHSA-vp8p-c6xj-xpj7

Remediation

  • Fix · GHSA-vp8p-c6xj-xpj7 silverstripe/framework (Packagist) Fixed in 3.0.14 Advisory →
  • Fix · GHSA-vp8p-c6xj-xpj7 silverstripe/framework (Packagist) Fixed in 3.1.13 Advisory →

Timeline

  1. 2026-10-03 Threatist record created from GHSA-vp8p-c6xj-xpj7

References

Other 5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences