| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/framework | ≥ 3.6.0, < 3.6.8≥ 3.7.0, < 3.7.4≥ 4.0.0, < 4.3.5≥ 4.4.0, < 4.4.4 | 3.6.83.7.44.3.54.4.4 |
| silverstripe | ≤ 4.3.3 |
SilverStripe through 4.3.3 allows session fixation in the "change password" form.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free