silverstripe/assets vulnerabilities (Packagist)
6 vulnerabilities.
silverstripe/assetsPackagistSilverstripe Assets Module has a DBFile::getURL() permission bypass5.3 Mediumsilverstripe/assetsPackagistSilverstripe XSS in shortcodes5.4 Mediumsilverstripe/assetsPackagistXSS via uploaded gpx file5.4 Mediumsilverstripe/assetsPackagistUnpublished, protected files can be published via shortcode4.3 Mediumsilverstripe/assetsPackagistSilverStripe Folders migrated from 3.x may be unsafe to upload to7.5 Highsilverstripe/assetsPackagistLack of access control on upoaded files5.3 Medium