SilverStripe Folders migrated from 3.x may be unsafe to upload to

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-9280 · ADVISORY
• silverstripe/silverstripe-assets commit 6779fd3 · WEB
• silverstripe/silverstripe-userforms commit 3bbad20 · WEB
• forum.silverstripe.org/c/releases · WEB
• FriendsOfPHP/security-advisories · WEB
• silverstripe/silverstripe-framework · PACKAGE
• silverstripe.org/download/security-releases · WEB
• silverstripe.org/download/security-releases/cve-2020-9280 · WEB
• silverstripe.org/download/security-releases · Vendor Advisory

silverstripe/assets のその他の脆弱性

• CVE-2026-24749中 5.3The Silverstripe Assets Module is a required component of Silverstripe Framework. In versions prior to 2.4.5 and 3.0.0-rc1 through 3.1.2, im…
• CVE-2022-38147中 5.4Silverstripe silverstripe/framework through 4.11 allows XSS (issue 3 of 3).
• CVE-2022-38724中 5.4Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0, and silverstripe/asset-admin through 1.11.0 allow XS…
• CVE-2022-29858中 4.3Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control that allows protected images to be published by chang…
• CVE-2019-12245中 5.3SilverStripe through 4.3.3 has incorrect access control for protected files uploaded via Upload::loadIntoFile(). An attacker may be able to …