SilverStripe GraphQL Server permission checker not inherited by query subclass.

MÉDIO 4.3CVE-2021-28661 · BIT-silverstripe-2021-28661 · GHSA-r7rh-g777-g5gx · Published 07/10/2021 · updated 17/06/2026

Em resumo

CVE-2021-28661 é uma vulnerabilidade MÉDIO (CVSS 4.3) que afeta silverstripe/graphql, silverstripe (silverstripe).
Chance de exploração nos próximos 30 dias (EPSS): 0.81%, maior que 57.0% das vulnerabilidades.
Correção: atualize para 3.5.2 ou posterior.

Package	Affected versions	Patched versions
silverstripe/graphql Packagist	`≥ 3.0.0, < 3.5.2`	`3.5.2`
silverstripe silverstripe	`≥ 3.0.0, ≤ 3.4.1`	No fix yet

Default SilverStripe GraphQL Server (aka silverstripe/graphql) 3.x through 3.4.1 permission checker not inherited by query subclass.

NVD description

Default SilverStripe GraphQL Server (aka silverstripe/graphql) 3.x through 3.4.1 permission checker not inherited by query subclass.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

≥ 3.0.0, < 3.5.2

3.5.2

≥ 3.0.0, ≤ 3.4.1

No fix yet

Mais vulnerabilidades de silverstripe/graphql

Ver tudo →