SilverStripe GraphQL Server permission checker not inherited by query subclass.

MEDIO 4.3CVE-2021-28661 · BIT-silverstripe-2021-28661 · GHSA-r7rh-g777-g5gx · Published 07/10/2021 · updated 17/06/2026

En resumen

CVE-2021-28661 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a silverstripe/graphql, silverstripe (silverstripe).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.81%, mayor que el 57.0% de las vulnerabilidades.
Solución: actualizar a 3.5.2 o posterior.

Package	Affected versions	Patched versions
silverstripe/graphql Packagist	`≥ 3.0.0, < 3.5.2`	`3.5.2`
silverstripe silverstripe	`≥ 3.0.0, ≤ 3.4.1`	No fix yet

Default SilverStripe GraphQL Server (aka silverstripe/graphql) 3.x through 3.4.1 permission checker not inherited by query subclass.

NVD description

Default SilverStripe GraphQL Server (aka silverstripe/graphql) 3.x through 3.4.1 permission checker not inherited by query subclass.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

≥ 3.0.0, < 3.5.2

3.5.2

≥ 3.0.0, ≤ 3.4.1

No fix yet

Más vulnerabilidades de silverstripe/graphql

Ver todo →