Em resumo
- CVE-2012-4968 é uma vulnerabilidade MÉDIO (CVSS 4.3) que afeta silverstripe/framework, silverstripe (silverstripe).
- Chance de exploração nos próximos 30 dias (EPSS): 1.9%, maior que 79.9% das vulnerabilidades.
- Correção: atualize para 2.3.13, 2.4.7 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| silverstripe/framework Packagist | ≥ 2.3, < 2.3.13≥ 2.4, < 2.4.7
| 2.3.132.4.7
|
| silverstripe | = 2.3.0= 2.3.1= 2.3.10= 2.3.11= 2.3.12= 2.3.2= 2.3.3= 2.3.4= 2.3.5= 2.3.6= 2.3.7= 2.3.8= 2.3.9= 2.4.0= 2.4.1= 2.4.2= 2.4.3= 2.4.5= 2.4.6
| No fix yet |
Description
Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe 2.3.x before 2.3.13 and 2.4.x before 2.4.7 allow remote attackers to inject arbitrary web script or HTML via
- a crafted string to the
AbsoluteLinks
BigSummaryContextSummaryEscapeXMLFirstParagraphFirstSentenceInitialLimitCharactersLimitSentencesLimitWordCountLimitWordCountXMLLowerLowerCaseNoHTMLSummaryUpperUpperCase, orURL method in a template,
different vectors than CVE-2012-0976.
NVD description
Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe 2.3.x before 2.3.13 and 2.4.x before 2.4.7 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted string to the AbsoluteLinks, (2) BigSummary, (3) ContextSummary, (4) EscapeXML, (5) FirstParagraph, (6) FirstSentence, (7) Initial, (8) LimitCharacters, (9) LimitSentences, (10) LimitWordCount, (11) LimitWordCountXML, (12) Lower, (13) LowerCase, (14) NoHTML, (15) Summary, (16) Upper, (17) UpperCase, or (18) URL method in a template, different vectors than CVE-2012-0976.
Mais vulnerabilidades de silverstripe/framework
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free