Security advisories

high2024-05-28

CVE-2024-35219-OpenAPI Generator Online - Arbitrary File Read/Delete

openapitools/openapi-generator · GHSA-g3hr-p86p-593h

medium2024-05-28

CVE-2024-32978-Kaminari Insecure File Permissions Vulnerability

kaminari/kaminari · GHSA-7r3j-qmr4-jfpj

high2024-05-28

silverstripe/graphql Cross-Site Request Forgery vulnerability

silverstripe/silverstripe-graphql · GHSA-wjg9-v8cf-f5q2

high2024-05-28

silverstripe/framework has potential SQL Injection vulnerability in PostgreSQL database connector

silverstripe/silverstripe-framework · GHSA-265q-222x-52m6

high2024-05-28

silverstripe/framework has possible denial of service attack vector when flushing

silverstripe/silverstripe-framework · GHSA-cwgq-83w5-8jfq

medium2024-05-28

silverstripe/framework may disclose database credentials during connection failure

silverstripe/silverstripe-framework · GHSA-m2hh-2m46-x6j5

high2024-05-27

silverstripe/framework allows upload of dangerous file types

silverstripe/silverstripe-framework · GHSA-vcg6-8fxc-x5cq

medium2024-05-27

silverstripe/framework vulnerable to member disclosure in login form

silverstripe/silverstripe-framework · GHSA-crr3-h4m8-7f56

low2024-05-27

silverstripe/framework sends passwords back to browsers under some circumstances

silverstripe/silverstripe-framework · GHSA-vh7q-j8p5-2h4h

medium2024-05-27

silverstripe/framework uploaded PHP script execution in assets

silverstripe/silverstripe-framework · GHSA-f43j-8hq4-2xj9

high2024-05-27

silverstripe/framework code execution vulnerability

silverstripe/silverstripe-framework · GHSA-vgxh-x8jv-hmff

high2024-05-27

silverstripe/framework BackURL validation bypass with malformed URLs

silverstripe/silverstripe-framework · GHSA-m5q3-mvcr-gc5m

medium2024-05-27

silverstripe/framework's install.php script discloses sensitive data by pre-populating DB credential forms

silverstripe/silverstripe-framework · GHSA-r3pr-fh25-wrfc

medium2024-05-27

silverstripe/framework Privilege Escalation Risk in Member Edit form

silverstripe/silverstripe-framework · GHSA-xpff-c35g-j3cr

medium2024-05-27

silverstripe/framework's URL parameters `isDev` and `isTest` unguarded

silverstripe/silverstripe-framework · GHSA-55qg-6c4m-mw6g

high2024-05-27

silverstripe/framework SQL injection in full text search

silverstripe/silverstripe-framework · GHSA-xx4r-5265-48j6

medium2024-05-27

silverstripe/framework users inadvertently passing sensitive data to LoginAttempt

silverstripe/silverstripe-framework · GHSA-ph62-fv59-vf9h

high2024-05-27

silverstripe/framework CSV Excel Macro Injection

silverstripe/silverstripe-framework · GHSA-mqjc-x563-c9q8

high2024-05-27

silverstripe/framework vulnerable to user enumeration via timing attack on login and password reset forms

silverstripe/silverstripe-framework · GHSA-7m2v-x7rg-5hm5

high2024-05-27

silverstripe/framework's User-Agent header not correctly invalidating user session

silverstripe/silverstripe-framework · GHSA-4qx8-j9vh-2628