silverstripe/silverstripe-cms · Security
Silverstripe CMS Arbitrary Code Execution
- GHSA ID
- GHSA-gv6c-59h4-9pmg
- CVE ID
- CVE-2011-4962
- Severity
- medium
- Published
- Updated
Description
code/sitefeatures/PageCommentInterface.php in SilverStripe 2.4.x before 2.4.6 might allow remote attackers to execute arbitrary code via a crafted cookie in a user comment submission, which is not properly handled when it is deserialized.
CWEs
- CWE-20 · Improper Input Validation
- CWE-502 · Deserialization of Untrusted Data
References
- https://nvd.nist.gov/vuln/detail/CVE-2011-4962 ↗
- http://www.openwall.com/lists/oss-security/2012/04/30/1 ↗
- http://www.openwall.com/lists/oss-security/2012/04/30/3 ↗
- https://github.com/silverstripe/silverstripe-cms/commit/d15e8509b01ff2dbbe3028a055021a29b1065b22 ↗
- https://web.archive.org/web/20120621234353/http://doc.silverstripe.org/framework/en/trunk/changelogs/2.4.6 ↗
- https://github.com/advisories/GHSA-gv6c-59h4-9pmg ↗