GitHub Advisoryadvisory · Packagist

GHSA-6r58-4xgr-gm6m SilverStripe Priviledge escalation through cache pollution

LOW Published 2019-11-12 Modified 2023-09-20 Official page ↗
Aliases
CVE-2019-12617
Ecosystem
Packagist
Packages
silverstripe/framework
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Reviewed
2019-11-12

Affected packages

• Packagist silverstripe/framework: >= 4.4.0, < 4.4.4 → fixed in 4.4.4 • Packagist silverstripe/framework: >= 4.3.0, < 4.3.5 → fixed in 4.3.5

Description

In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution.

Related

Alias · CVE (1)

  • CVE-2019-12617 In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution. vulnerability

References