En bref
- CVE-2012-4968 est une vulnérabilité MOYENNE (CVSS 4.3) touchant silverstripe/framework, silverstripe (silverstripe).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.9%, plus élevée que 80.0% des vulnérabilités.
- Correctif : mettre à jour vers 2.3.13, 2.4.7 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| silverstripe/framework Packagist | ≥ 2.3, < 2.3.13≥ 2.4, < 2.4.7
| 2.3.132.4.7
|
| silverstripe | = 2.3.0= 2.3.1= 2.3.10= 2.3.11= 2.3.12= 2.3.2= 2.3.3= 2.3.4= 2.3.5= 2.3.6= 2.3.7= 2.3.8= 2.3.9= 2.4.0= 2.4.1= 2.4.2= 2.4.3= 2.4.5= 2.4.6
| No fix yet |
Description
Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe 2.3.x before 2.3.13 and 2.4.x before 2.4.7 allow remote attackers to inject arbitrary web script or HTML via
- a crafted string to the
AbsoluteLinks
BigSummaryContextSummaryEscapeXMLFirstParagraphFirstSentenceInitialLimitCharactersLimitSentencesLimitWordCountLimitWordCountXMLLowerLowerCaseNoHTMLSummaryUpperUpperCase, orURL method in a template,
different vectors than CVE-2012-0976.
NVD description
Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe 2.3.x before 2.3.13 and 2.4.x before 2.4.7 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted string to the AbsoluteLinks, (2) BigSummary, (3) ContextSummary, (4) EscapeXML, (5) FirstParagraph, (6) FirstSentence, (7) Initial, (8) LimitCharacters, (9) LimitSentences, (10) LimitWordCount, (11) LimitWordCountXML, (12) Lower, (13) LowerCase, (14) NoHTML, (15) Summary, (16) Upper, (17) UpperCase, or (18) URL method in a template, different vectors than CVE-2012-0976.
Autres vulnérabilités de silverstripe/framework
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free