SilverStripe GraphQL Server permission checker not inherited by query subclass.

MEDIO 4.3CVE-2021-28661 · BIT-silverstripe-2021-28661 · GHSA-r7rh-g777-g5gx · Published 07/10/2021 · updated 17/06/2026

In breve

CVE-2021-28661 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda silverstripe/graphql, silverstripe (silverstripe).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.81%, superiore al 57.0% delle vulnerabilità.
Correzione: aggiornare a 3.5.2 o successiva.

Package	Affected versions	Patched versions
silverstripe/graphql Packagist	`≥ 3.0.0, < 3.5.2`	`3.5.2`
silverstripe silverstripe	`≥ 3.0.0, ≤ 3.4.1`	No fix yet

Default SilverStripe GraphQL Server (aka silverstripe/graphql) 3.x through 3.4.1 permission checker not inherited by query subclass.

NVD description

Default SilverStripe GraphQL Server (aka silverstripe/graphql) 3.x through 3.4.1 permission checker not inherited by query subclass.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

≥ 3.0.0, < 3.5.2

3.5.2

≥ 3.0.0, ≤ 3.4.1

No fix yet

Altre vulnerabilità di silverstripe/graphql

Vedi tutto →