GitHub Advisoryadvisory · Packagist

GHSA-592m-4533-rxq9 SilverStripe Folders migrated from 3.x may be unsafe to upload to

HIGH Published 2022-05-24 Modified 2024-04-25 Official page ↗
Aliases
CVE-2020-9280
Ecosystem
Packagist
Packages
silverstripe/framework, silverstripe/userforms, silverstripe/assets
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-434
Reviewed
2024-04-25

Affected packages

• Packagist silverstripe/framework: >= 4.0.0, < 4.4.6 → fixed in 4.4.6 • Packagist silverstripe/userforms: >= 5.0.0, < 5.4.2 → fixed in 5.4.2 • Packagist silverstripe/assets: >= 1.0.0, < 1.4.7 → fixed in 1.4.7 • Packagist silverstripe/assets: >= 1.5.0, < 1.5.2 → fixed in 1.5.2

Description

In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the default "/Uploads" folder instead. This affects installations which allowed upload folder protection via the optional silverstripe/secureassets module under 3.x. This module is installed and enabled by default on the Common Web Platform (CWP). The vulnerability only affects files uploaded after an upgrade to 4.x.

Related

Alias · CVE (1)

  • CVE-2020-9280 In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the default "/Uploads"… vulnerability

Weakness · CWE (1)

  • CWE-434 Unrestricted Upload of File with Dangerous Type weakness

References