GitHub Advisoryadvisory · Packagist

GHSA-32m2-9f76-4gv8 Business Logic Errors in SilverStripe Framework

MEDIUM Published 2022-02-06 Modified 2022-02-11 Official page ↗

Aliases: CVE-2022-0227
Ecosystem: Packagist
Packages: silverstripe/framework
Severity: Moderate
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Reviewed: 2022-02-07

Affected packages

• Packagist silverstripe/framework: < 4.10.1 → fixed in 4.10.1

Description

SilverStripe Framework prior to version 4.10.1 is vulnerable to business logic errors.

Related

Alias · not in database (1)

CVE-2022-0227

References