| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/framework | < 4.12.5 | 4.12.5 |
| framework | < 4.12.5 | 4.12.5 |
An attacker can display a link to a third party website on a login screen by convincing a legitimate content author to follow a specially crafted link.
Upgrade to silverstripe/framework 4.12.5 or above to remedy the vulnerability.
Reporter: Matthew Dekker
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free