silverstripe/framework has Cross-site Scripting vulnerability in page name

MEDIO 6.1GHSA-hhvj-mcrx-3vcf · Published 27/05/2024 · updated 02/12/2024

In breve

GHSA-hhvj-mcrx-3vcf è una vulnerabilità MEDIO (CVSS 6.1) che riguarda silverstripe/framework.
Correzione: aggiornare a 3.4.4, 3.5.2 o successiva.

Package	Affected versions	Patched versions
silverstripe/framework Packagist	`≥ 3.4.0-rc1, < 3.4.4≥ 3.5.0-rc1, < 3.5.2`	`3.4.43.5.2`

silverstripe/framework is vulnerable to XSS in Page name where the payload "><svg/onload=alert(/xss/)> will trigger an XSS alert.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

≥ 3.4.0-rc1, < 3.4.4≥ 3.5.0-rc1, < 3.5.2

3.4.43.5.2

Altre vulnerabilità di silverstripe/framework

Vedi tutto →