GitHub Advisoryadvisory · Packagist

GHSA-fh35-p8ph-p545 Silverstripe CMS Open Redirect

MEDIUM Published 2022-05-14 Modified 2023-08-02 Official page ↗
Aliases
CVE-2015-5062
Ecosystem
Packagist
Packages
silverstripe/cms, silverstripe/framework
Severity
Moderate
Weaknesses
CWE-601
Reviewed
2023-08-02

Affected packages

• Packagist silverstripe/cms: <= 3.1.13 (no fix yet) • Packagist silverstripe/framework: <= 3.1.13 (no fix yet)

Description

Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the returnURL parameter to dev/build.

Related

Alias · CVE (1)

  • CVE-2015-5062 Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to arbitrary web sites and… vulnerability

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References