SilverStripe asset-admin Cross-site Scripting (XSS)

MEDIO 5.4CVE-2019-14272 · GHSA-jgw2-f5mx-rg7h · Published 26/09/2019 · updated 17/06/2026

In breve

CVE-2019-14272 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda silverstripe/framework, silverstripe (silverstripe).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.73%, superiore al 54.1% delle vulnerabilità.
Correzione: aggiornare a 4.3.5, 4.4.4 o successiva.

Package	Affected versions	Patched versions
silverstripe/framework Packagist	`≥ 4.0.0, < 4.3.5≥ 4.4.0, < 4.4.4`	`4.3.54.4.4`
silverstripe silverstripe	`≤ 4.0.0`	No fix yet

In SilverStripe asset-admin 4.0, there is XSS in file titles managed through the CMS.

NVD description

In SilverStripe asset-admin 4.0, there is XSS in file titles managed through the CMS.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

≥ 4.0.0, < 4.3.5≥ 4.4.0, < 4.4.4

4.3.54.4.4

≤ 4.0.0

No fix yet

Altre vulnerabilità di silverstripe/framework

Vedi tutto →