CVE-2010-5088

概要

参考情報

• doc.silverstripe.org/sapphire/en/trunk/changelogs//2.3.9
• doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.3
• holisticinfosec.org/content/view/157/45
• open.silverstripe.org/changeset/113275 · Patch
• open.silverstripe.org/changeset/113282 · Patch
• secunia.com/advisories/41717 · Vendor Advisory
• openwall.com/lists/oss-security/2011/01/03/12
• openwall.com/lists/oss-security/2012/04/30/1
• openwall.com/lists/oss-security/2012/04/30/3
• openwall.com/lists/oss-security/2012/05/01/3
• osvdb.org/69113
• securityfocus.com/bid/44768
• exchange.xforce.ibmcloud.com/vulnerabilities/63156

silverstripe のその他の脆弱性

• CVE-2022-37421中 5.4Silverstripe silverstripe/cms through 4.11.0 allows XSS.
• CVE-2022-28803中 5.4In SilverStripe Framework through 2022-04-07, Stored XSS can occur in javascript link tags added via XMLHttpRequest (XHR).
• CVE-2022-24444中 6.5Silverstripe silverstripe/framework through 4.10 allows Session Fixation.
• CVE-2021-41559中 6.5Silverstripe silverstripe/framework 4.8.1 has a quadratic blowup in Convert::xml2array() that enables a remote attack via a crafted XML docu…
• CVE-2021-28661中 4.3Default SilverStripe GraphQL Server (aka silverstripe/graphql) 3.x through 3.4.1 permission checker not inherited by query subclass.