silverstripe/framework vulnerabilities (Packagist)
93 vulnerabilities.
silverstripe/frameworkPackagistSilverstripe External redirection risk in Security?ReturnURL5.8 Mediumsilverstripe/frameworkPackagistSilverstripe X-Forwarded-Host request hostname injection7.2 Highsilverstripe/frameworkPackagistSilverstripe XSS in Director::force_redirect()6.1 Mediumsilverstripe/frameworkPackagistSilverstripe XSS In FormAction6.1 Mediumsilverstripe/frameworkPackagistSilverstripe XSS In rewritten hash links6.1 Mediumsilverstripe/frameworkPackagistSilverstripe XSS In GridField print6.1 Mediumsilverstripe/frameworkPackagistSilverstripe XSS in TreeDropdownField and TreeMultiSelectField6.1 Mediumsilverstripe/frameworkPackagistSilverStripe framework XML Quadratic Blowup Attack5.3 Mediumsilverstripe/frameworkPackagistSilverstripe IE requests not properly behaving with rewritehashlinks6.1 Mediumsilverstripe/frameworkPackagistRecord titles for restricted records can be viewed if exposed by GridFieldAddExistingAutocompleter4.3 Mediumsilverstripe/frameworkPackagistSilverstripe Framework: Members with no password can be created and bypass custom login forms0.0 Nonesilverstripe/frameworkPackagistSilverstripe Framework has open redirect vulnerability on CMSSecurity relogin screen5.4 Mediumsilverstripe/frameworkPackagistSilverstripe Framework has missing permission check of canView in GridFieldPrintButton4.3 Mediumsilverstripe/frameworkPackagistReflected XSS in querystring parameters6.1 Mediumsilverstripe/frameworkPackagistStored XSS using HTMLEditor5.4 Mediumsilverstripe/frameworkPackagistStored XSS using uppercase characters in HTMLEditor5.4 Mediumsilverstripe/frameworkPackagistSilverstripe XSS in shortcodes5.4 Mediumsilverstripe/frameworkPackagistBlind SQL Injection via GridFieldSortableHeader8.8 Highsilverstripe/frameworkPackagistStored XSS in link tags added via XHR in SilverStripe Framework5.4 Mediumsilverstripe/frameworkPackagistStored XSS via HTML fields in SilverStripe Framework5.4 Mediumsilverstripe/frameworkPackagistQuadratic blowup in Convert::xml2array()6.5 Mediumsilverstripe/frameworkPackagistBusiness Logic Errors in SilverStripe Framework4.3 Mediumsilverstripe/frameworkPackagistSilverStripe XXE Vulnerability in CSSContentParser4.8 Mediumsilverstripe/frameworkPackagistFormField with square brackets in field name skips validation5.3 Mediumsilverstripe/frameworkPackagistSilverstripe CMS XSS Vulnerability5.4 Mediumsilverstripe/frameworkPackagistSilverstripe CMS information disclosure7.5 Highsilverstripe/frameworkPackagistSilverStripe Web Cache Poisoning through HTTPRequestBuilder5.9 Mediumsilverstripe/frameworkPackagistSilverStripe Folders migrated from 3.x may be unsafe to upload to7.5 Highsilverstripe/frameworkPackagistSilverStripe Denial of Service on flush and development URL tools4.3 Mediumsilverstripe/frameworkPackagistReflected XSS in SilverStripe6.1 Mediumsilverstripe/frameworkPackagistSilverStripe Versioned Files module Unpublished files are exposed publicly5.3 Mediumsilverstripe/frameworkPackagistSilverStripe Priviledge escalation through cache pollution2.7 Lowsilverstripe/frameworkPackagistSilverStripe asset-admin Cross-site Scripting (XSS)5.4 Mediumsilverstripe/frameworkPackagistBroken access control on files5.3 Mediumsilverstripe/frameworkPackagistSilverstripe Flash Clipboard Reflected XSS6.1 Mediumsilverstripe/frameworkPackagistSession fixation in change password form6.3 Mediumsilverstripe/frameworkPackagistLack of access control on upoaded files5.3 Mediumsilverstripe/frameworkPackagistMissing warning can lead to unauthenticated admin access in SilverStripe9.8 Criticalsilverstripe/frameworkPackagistSilverstripe Framework SQLi Vulnerability9.8 Criticalsilverstripe/frameworkPackagistSilverStripe CSV Excel Macro Injection5.5 Mediumsilverstripe/frameworkPackagistSilverstripe CMS Open Redirect5.8 Mediumsilverstripe/frameworkPackagistSilverstripe XSS Vulnerabilities4.3 Mediumsilverstripe/frameworkPackagistSilverStripe vulnerable to Cross-site Scripting4.3 Medium