En bref
- CVE-2011-4962 est une vulnérabilité MOYENNE (CVSS 6.8) touchant silverstripe/cms, silverstripe (silverstripe).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 3.9%, plus élevée que 90.3% des vulnérabilités.
- Correctif : mettre à jour vers 2.4.6 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| silverstripe/cms Packagist | ≥ 2.4.0, < 2.4.6
| 2.4.6
|
| silverstripe | = 2.4.0= 2.4.1= 2.4.2= 2.4.3= 2.4.4= 2.4.5
| No fix yet |
Description
code/sitefeatures/PageCommentInterface.php in SilverStripe 2.4.x before 2.4.6 might allow remote attackers to execute arbitrary code via a crafted cookie in a user comment submission, which is not properly handled when it is deserialized.
NVD description
code/sitefeatures/PageCommentInterface.php in SilverStripe 2.4.x before 2.4.6 might allow remote attackers to execute arbitrary code via a crafted cookie in a user comment submission, which is not properly handled when it is deserialized.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free