TI-2024-38771 Aliases GHSA-m5q3-mvcr-gc5m

silverstripe/framework BackURL validation bypass with malformed URLs

LOW 38CWE-601Published 2024-05-27 · Updated 2024-05-27

Key facts

Attack vector: —
Privileges required: —
User interaction: —
Attack complexity: —
Impact type: Spoofing
Confidentiality · integrity · availability: —
Fix status: Fixed

No CVSS vector from any source. Fix status from GitHub. Impact type from CWE-601.

Summary

A carefully constructed malformed URL can be used to circumvent the offsite redirection protection used on `BackURL` parameters. This could lead to users entering sensitive data in malicious websites instead of the intended one.

Why it matters now

Fix Fixed silverstripe/framework (Packagist): 4.0.4, 4.1.1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	silverstripe/framework (Packagist)	4.0.0-rc1 to before 4.0.4	4.0.4	Patch available	GHSA-m5q3-mvcr-gc5m
—	silverstripe/framework (Packagist)	4.1.0-rc1 to before 4.1.1	4.1.1	Patch available	GHSA-m5q3-mvcr-gc5m

silverstripe/framework (Packagist) Vendor— Affected 4.0.0-rc1 to before 4.0.4 Fixed in 4.0.4 Patch available GHSA-m5q3-mvcr-gc5m
silverstripe/framework (Packagist) Vendor— Affected 4.1.0-rc1 to before 4.1.1 Fixed in 4.1.1 Patch available GHSA-m5q3-mvcr-gc5m

Remediation

Fix · GHSA-m5q3-mvcr-gc5m silverstripe/framework (Packagist) Fixed in 4.0.4 Advisory →
Fix · GHSA-m5q3-mvcr-gc5m silverstripe/framework (Packagist) Fixed in 4.1.1 Advisory →

Timeline

2026-10-03 Threatist record created from GHSA-m5q3-mvcr-gc5m

References

Other 4

Sources

GHSA-m5q3-mvcr-gc5m · GitHub Advisory Database · CC BY 4.0

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences