silverstripe/framework vulnerabilities (Packagist)
93 vulnerabilities.
-
silverstripe/frameworkPackagist Silverstripe Framework: Possible XSS attack through media embed 5.4 Medium -
silverstripe/frameworkPackagist Silverstripe Framework user enumeration via timing attack on login and password reset forms 5.3 Medium -
silverstripe/frameworkPackagist Silverstripe Framework has a XSS vulnerability in HTML editor 5.4 Medium -
silverstripe/frameworkPackagist Reflected Cross Site Scripting (XSS) in error message No score -
silverstripe/frameworkPackagist Silverstripe Framework has a Reflected Cross Site Scripting (XSS) in error message 0.0 None -
silverstripe/frameworkPackagist Cross-site Scripting in form messages in silverstripe framework 5.4 Medium -
silverstripe/frameworkPackagist Cross-site Scripting via insert media remote file oembed in silverstripe-asset-admin 5.4 Medium -
silverstripe/frameworkPackagist Silverstripe uses TinyMCE which allows svg files linked in object tags 5.3 Medium -
silverstripe/frameworkPackagist Cross-site Scripting vulnerability with encoded payload in silverstripe/framework 5.4 Medium -
silverstripe/frameworkPackagist silverstripe/framework has potential SQL Injection vulnerability in PostgreSQL database connector 8.8 High -
silverstripe/frameworkPackagist silverstripe/framework has possible denial of service attack vector when flushing 7.5 High -
silverstripe/frameworkPackagist silverstripe/framework may disclose database credentials during connection failure 6.5 Medium -
silverstripe/frameworkPackagist silverstripe/framework allows upload of dangerous file types 8.8 High -
silverstripe/frameworkPackagist silverstripe/framework vulnerable to member disclosure in login form 5.3 Medium -
silverstripe/frameworkPackagist silverstripe/framework sends passwords back to browsers under some circumstances 3.5 Low -
silverstripe/frameworkPackagist silverstripe/framework uploaded PHP script execution in assets No score -
silverstripe/frameworkPackagist silverstripe/framework code execution vulnerability 7.5 High -
silverstripe/frameworkPackagist silverstripe/framework BackURL validation bypass with malformed URLs 7.5 High -
silverstripe/frameworkPackagist silverstripe/framework's install.php script discloses sensitive data by pre-populating DB credential forms 6.5 Medium -
silverstripe/frameworkPackagist silverstripe/framework Privilege Escalation Risk in Member Edit form 6.5 Medium -
silverstripe/frameworkPackagist silverstripe/framework's URL parameters `isDev` and `isTest` unguarded 6.5 Medium -
silverstripe/frameworkPackagist silverstripe/framework SQL injection in full text search 8.8 High -
silverstripe/frameworkPackagist silverstripe/framework users inadvertently passing sensitive data to LoginAttempt 6.5 Medium -
silverstripe/frameworkPackagist silverstripe/framework CSV Excel Macro Injection 8.0 High -
silverstripe/frameworkPackagist silverstripe/framework vulnerable to user enumeration via timing attack on login and password reset forms No score -
silverstripe/frameworkPackagist silverstripe/framework's User-Agent header not correctly invalidating user session 7.5 High -
silverstripe/frameworkPackagist silverstripe/framework has Cross-site Scripting vulnerability in page history comparison No score -
silverstripe/frameworkPackagist silverstripe/framework has Cross-site Scripting vulnerability in RedirectorPage 6.1 Medium -
silverstripe/frameworkPackagist silverstripe/framework has Cross-site Scripting vulnerability in CMSSecurity BackURL 6.1 Medium -
silverstripe/frameworkPackagist silverstripe/framework has Cross-site Scripting vulnerability in page name 6.1 Medium -
silverstripe/frameworkPackagist silverstripe/framework member disclosure in login form 5.3 Medium -
silverstripe/frameworkPackagist silverstripe/framework vulnerable to Cross-site Scripting In `OptionsetField` and `CheckboxSetField` 6.1 Medium -
silverstripe/frameworkPackagist silverstripe/framework's `Member.Name` is not escaped 5.4 Medium -
silverstripe/frameworkPackagist silverstripe/framework's pre-existing alc_enc cookies log users in if remember me is disabled 3.1 Low -
silverstripe/frameworkPackagist silverstripe/framework missing ACL on reports 4.3 Medium -
silverstripe/frameworkPackagist silverstripe/framework ChangePasswordForm does not check `Member::canLogIn()` 4.3 Medium -
silverstripe/frameworkPackagist silverstripe/framework password encryption salt not updated No score -
silverstripe/frameworkPackagist silverstripe/framework ReadOnly transformation for formfields exploitable 6.1 Medium -
silverstripe/frameworkPackagist Silverstripe Cross-site scripting vulnerability in VersionedRequestFilter 6.1 Medium -
silverstripe/frameworkPackagist Silverstripe Missing CSRF protection in login form 5.4 Medium -
silverstripe/frameworkPackagist Silverstripe Brute force bypass on default admin 9.1 Critical -
silverstripe/frameworkPackagist Silverstripe XSS in CMS Edit Page 6.1 Medium -
silverstripe/frameworkPackagist Silverstripe Hostname, IP and Protocol Spoofing through HTTP Headers 6.5 Medium -
silverstripe/frameworkPackagist Silverstripe CSRF vulnerability in GridFieldAddExistingAutocompleter 4.3 Medium -
silverstripe/frameworkPackagist Silverstripe Missing security check on dev/build/defaults 6.5 Medium -
silverstripe/frameworkPackagist Silverstripe HtmlEditor embed url sanitisation 4.3 Medium -
silverstripe/frameworkPackagist Silverstripe Form field validation message XSS vulnerability 6.1 Medium -
silverstripe/frameworkPackagist Silverstripe framework is vulnerable to XSS in install.php 6.1 Medium -
silverstripe/frameworkPackagist SilverStripe Vulnerability on 'isDev', 'isTest' and 'flush' $_GET validation 6.5 Medium -
silverstripe/frameworkPackagist Silverstripe XSS in dev/build returnURL Parameter 4.7 Medium - Show olderLoading…