GitHub Advisoryadvisory · Packagist
GHSA-7cmp-cgg8-4c82 Silverstripe Framework has a XSS via insert media remote file oembed
MEDIUM
Official page ↗
- Aliases
- CVE-2024-47605
- Ecosystem
- Packagist
- Packages
- silverstripe/framework
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
- Weaknesses
- CWE-79
- Reviewed
- 2025-01-14
Affected packages
• Packagist silverstripe/framework: < 5.3.8 → fixed in 5.3.8
Description
Impact
When using the "insert media" functionality, the linked oEmbed JSON includes an HTML attribute which will replace the embed shortcode. The HTML is not sanitized before replacing the shortcode, allowing a script payload to be executed on both the CMS and the front-end of the website.
References
• https://www.silverstripe.org/download/security-releases/cve-2024-47605
Reported by
James Nicoll from Fujitsu Cyber Security Services
Related
Alias · CVE (1)
- CVE-2024-47605 silverstripe-asset-admin is a silverstripe assets gallery for asset management. vulnerability
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://github.com/silverstripe/silverstripe-asset-admin/security/advisories/GHSA-7cmp-cgg8-4c82 web
- https://nvd.nist.gov/vuln/detail/CVE-2024-47605 advisory
- https://github.com/silverstripe/silverstripe-framework/commit/09b5052c86932f273e0d733428c9aade70ff2a4a web
- https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/CVE-2024-47605.yaml web
- https://github.com/silverstripe/silverstripe-framework package
- https://www.silverstripe.org/download/security-releases/cve-2024-47605 web