Vulnerabilities

TI-2023-23907 CVE-2023-44401 · GHSA-jgph-w8rh-xf5p

Silverstripe GraqhQL's view permissions are bypassed for paginated lists of ORM data

LOW 24

The Silverstripe CMS GraphQL Server serves Silverstripe data as GraphQL representations.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00419 Published 2024-01-23 Fixed in 4.3.7, 5.1.3 CWE-863

TI-2023-21053 CVE-2023-40180 · GHSA-v23w-pppm-jh66

LOW 35

silverstripe-graphql is a package which serves Silverstripe data in GraphQL representations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01126 Published 2023-10-16 Fixed in 3.8.2, 4.1.3 +3 CWE-400

TI-2023-12683 CVE-2023-28104 · GHSA-67g8-c724-8mp3

MEDIUM 41

`silverstripe/graphql` serves Silverstripe data as GraphQL representations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01055 Published 2023-03-16 Fixed in 4.1.2, 4.2.3 CWE-770