| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/framework | ≥ 3.5.0-rc1, < 3.5.5≥ 3.6.0-rc1, < 3.6.2 | 3.5.53.6.2 |
User enumeration is possible by performing a timing attack on the login or password reset pages with user credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free