Security advisories

medium2024-05-24

CVE-2024-36361-Pug allows JavaScript code execution if an application accepts untrusted input

pugjs/pug · GHSA-3965-hpx2-q597

medium2024-05-23

silverstripe/framework ReadOnly transformation for formfields exploitable

silverstripe/silverstripe-framework · GHSA-97jm-g33h-f46g

medium2024-05-23

Silverstripe Cross-site scripting vulnerability in VersionedRequestFilter

silverstripe/silverstripe-framework · GHSA-mpqj-f4v3-334h

medium2024-05-23

Silverstripe Missing CSRF protection in login form

silverstripe/silverstripe-framework · GHSA-vj2j-6g3w-4662

critical2024-05-23

Silverstripe Brute force bypass on default admin

silverstripe/silverstripe-framework · GHSA-8v6m-7f5v-hhx6

medium2024-05-23

Silverstripe XSS in CMS Edit Page

silverstripe/silverstripe-framework · GHSA-m8v7-x398-pxrf

medium2024-05-23

Silverstripe Hostname, IP and Protocol Spoofing through HTTP Headers

silverstripe/silverstripe-framework · GHSA-87pf-7x99-5xc4

medium2024-05-23

Silverstripe CSRF vulnerability in GridFieldAddExistingAutocompleter

silverstripe/silverstripe-framework · GHSA-2hpc-mf4q-j885

medium2024-05-23

Silverstripe Missing security check on dev/build/defaults

silverstripe/silverstripe-framework · GHSA-x5w2-wcr8-9q45

medium2024-05-23

Silverstripe HtmlEditor embed url sanitisation

silverstripe/silverstripe-framework · GHSA-qp29-wcc2-vmpc

medium2024-05-23

Silverstripe Form field validation message XSS vulnerability

silverstripe/silverstripe-framework · GHSA-j982-5jv7-v43r

medium2024-05-23

Silverstripe framework is vulnerable to XSS in install.php

silverstripe/silverstripe-framework · GHSA-mqf5-275h-gf6r

medium2024-05-23

SilverStripe Vulnerability on 'isDev', 'isTest' and 'flush' $_GET validation

silverstripe/silverstripe-framework · GHSA-g4hp-pfvf-vm5w

medium2024-05-23

Silverstripe XSS in dev/build returnURL Parameter

silverstripe/silverstripe-framework · GHSA-hq4p-5mpr-jj9m

medium2024-05-23

Silverstripe External redirection risk in Security?ReturnURL

silverstripe/silverstripe-framework · GHSA-vp8p-c6xj-xpj7

high2024-05-23

Silverstripe X-Forwarded-Host request hostname injection

silverstripe/silverstripe-framework · GHSA-25gq-jvx2-vg9x

medium2024-05-23

Silverstripe XSS in Director::force_redirect()

silverstripe/silverstripe-framework · GHSA-jqp8-v74p-g8px

medium2024-05-23

Silverstripe XSS In FormAction

silverstripe/silverstripe-framework · GHSA-4h54-vwx9-3vr3

medium2024-05-23

Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop

traefik/traefik · GHSA-f7cq-5v43-8pwp

medium2024-05-23

Silverstripe XSS In GridField print

silverstripe/silverstripe-framework · GHSA-88jp-9jrv-6368