silverstripe/framework's install.php script discloses sensitive data by pre-populating DB credential forms

概要

参考情報

• silverstripe/silverstripe-framework commit 7a79cd0 · WEB
• FriendsOfPHP/security-advisories · WEB
• silverstripe/silverstripe-framework · PACKAGE
• silverstripe.org/download/security-releases/ss-2017-010 · WEB

silverstripe/framework のその他の脆弱性

• CVE-2026-54720中 5.4Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In versions prior to 6.2.2, the "Insert media from web" functio…
• GHSA-256q-hx8w-xcqx中 5.3Silverstripe Framework user enumeration via timing attack on login and password reset forms
• CVE-2025-30148中 5.4Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. Prior to 5.3.23, bad actor with access to edit content in the C…
• GHSA-74j9-xhqr-6qv3低Reflected Cross Site Scripting (XSS) in error message
• CVE-2024-53277中 5.4Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In some cases, form messages can contain HTML markup. This is a…