| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/framework | ≥ 3.5.7-rc1, < 3.5.8≥ 3.6.0-rc1, < 3.6.6≥ 4.0.0-rc1, < 4.0.4≥ 4.1.0-rc1, < 4.1.1 | 3.5.83.6.64.0.44.1.1 |
A member with the permission EDIT_PERMISSIONS and access to the "Security" section is able to re-assign themselves (or another member) to ADMIN level.
CMS Fields for the member are constructed using DirectGroups instead of Groups relation which results in bypassing security logic preventing privilege escalation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free