Vulnerabilities

TI-2022-18248 CVE-2022-38724 · GHSA-9cx2-hj6m-fv58

Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0…

LOW 26

Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0, and silverstripe/asset-admin through 1.11.0 allow XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00709 Published 2022-11-22 Fixed in 1.11.1, 4.11.13 CWE-79

TI-2022-12217 CVE-2022-29858 · GHSA-v68g-62v9-39w5

Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control…

LOW 23

Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control that allows protected images to be published by changing an existing image short code on website content.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01245 Published 2022-06-28 Fixed in 1.10.1 CWE-287

Vulnerabilities

Filters

Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0…

Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control…