| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/framework | ≥ 3.1.18, < 3.1.19≥ 3.2.3, < 3.2.4≥ 3.3.1, < 3.3.2 | 3.1.193.2.43.3.2 |
LoginForm calls disableSecurityToken(), which causes a "shared host domain" vulnerability: http://stackoverflow.com/a/15350123.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free