silverstripe vulnerabilities (Bitnami)

13 vulnerabilities.

• silverstripe Bitnami Silverstipe CMS Stored XSS in custom meta tags CVE-2022-37421 Fix available 5.4 MediumNovember 21, 2022
• silverstripe Bitnami Stored XSS in link tags added via XHR in SilverStripe Framework CVE-2022-28803 Fix available 5.4 MediumJune 29, 2022
• silverstripe Bitnami Hybridsessions does not expire session id on logout CVE-2022-24444 Fix available 6.5 MediumJune 28, 2022
• silverstripe Bitnami Quadratic blowup in Convert::xml2array() CVE-2021-41559 Fix available 6.5 MediumJune 28, 2022
• silverstripe Bitnami SilverStripe GraphQL Server permission checker not inherited by query subclass. CVE-2021-28661 Fix available 4.3 MediumOctober 7, 2021
• silverstripe Bitnami Cross-site Scripting in SilverStripe Framework CVE-2021-36150 Fix available 6.1 MediumOctober 7, 2021
• silverstripe Bitnami Authentication bypass in SilverStripe GraphQL CVE-2020-26136 Fix available 6.5 MediumJune 8, 2021
• silverstripe Bitnami SilverStripe XXE Vulnerability in CSSContentParser CVE-2020-25817 Fix available 4.8 MediumJune 8, 2021
• silverstripe Bitnami FormField with square brackets in field name skips validation CVE-2020-26138 Fix available 5.3 MediumJune 8, 2021
• silverstripe Bitnami Silverstripe CMS XSS Vulnerability CVE-2020-9311 Fix available 5.4 MediumJuly 15, 2020
• silverstripe Bitnami Silverstripe CMS information disclosure CVE-2020-6164 Fix available 7.5 HighJuly 15, 2020
• silverstripe Bitnami Silverstripe has Incorrect Default Permissions CVE-2020-6165 Fix available 5.3 MediumJuly 15, 2020
• silverstripe Bitnami SilverStripe Folders migrated from 3.x may be unsafe to upload to CVE-2020-9280 Fix available 7.5 HighApril 15, 2020