| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/framework | < 4.12.5 | 4.12.5 |
| framework | < 4.12.5 | 4.12.5 |
The GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorised to access.
Upgrade to silverstripe/framework 4.12.5 or above to address the issue.
Reported by Stephan Bauer from relaxt Webdienstleistungsagentur GmbH
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free