| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/framework | ≥ 4.0.0-rc1, < 4.0.1 | 4.0.1 |
When accessing the install.php script it is possible to extract any pre-configured database or default admin account password by viewing the source of the page, and inspecting the value property of the password fields.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free