silverstripe/framework uploaded PHP script execution in assets
Key facts
- Attack vector
- —
- Privileges required
- —
- User interaction
- —
- Attack complexity
- —
- Impact type
- —
- Confidentiality · integrity · availability
- —
- Fix status
- Fixed
No CVSS vector from any source. Fix status from GitHub.
Summary
A weakness in the .htaccess rules preventing requests to uploaded PHP scripts allows PHP scripts that had made their way into the assets directory to be successfully executed through the use of a specially crafted URL. There are protections in place to disallow upload of PHP scripts through the CMS, meaning this weakness does not lead to direct vulnerabilities. In addition, sites hosted on the New Zealand Common Web Platform or SilverStripe Platform have additional configuration in place which prevents PHP script execution in assets, even in a malicious party manages to upload these into the folder.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | silverstripe/framework (Packagist) | 4.0.0-rc1 to before 4.0.4 | 4.0.4 | Patch available | GHSA-f43j-8hq4-2xj9 |
| — | silverstripe/framework (Packagist) | 4.1.0-rc1 to before 4.1.1 | 4.1.1 | Patch available | GHSA-f43j-8hq4-2xj9 |
- silverstripe/framework (Packagist) Vendor— Affected 4.0.0-rc1 to before 4.0.4 Fixed in 4.0.4 Patch available GHSA-f43j-8hq4-2xj9
- silverstripe/framework (Packagist) Vendor— Affected 4.1.0-rc1 to before 4.1.1 Fixed in 4.1.1 Patch available GHSA-f43j-8hq4-2xj9
Remediation
- Fix · GHSA-f43j-8hq4-2xj9 silverstripe/framework (Packagist) Fixed in 4.0.4 Advisory →
- Fix · GHSA-f43j-8hq4-2xj9 silverstripe/framework (Packagist) Fixed in 4.1.1 Advisory →
Timeline
- 2026-10-03 Threatist record created from GHSA-f43j-8hq4-2xj9
References
Other 4
- https://github.com/silverstripe/silverstripe-framework/commit/5b7eca2b6327556e2d5ad31bb00511b187e5992a
- https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2018-012-1.yaml
- https://github.com/silverstripe/silverstripe-framework
- https://www.silverstripe.org/download/security-releases/ss-2018-012
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences