Security advisories

critical2024-05-23

Silverstripe Brute force bypass on default admin

GHSA-8v6m-7f5v-hhx6

medium2024-05-23

Silverstripe XSS in CMS Edit Page

GHSA-m8v7-x398-pxrf

medium2024-05-23

Silverstripe Hostname, IP and Protocol Spoofing through HTTP Headers

GHSA-87pf-7x99-5xc4

medium2024-05-23

Silverstripe CSRF vulnerability in GridFieldAddExistingAutocompleter

GHSA-2hpc-mf4q-j885

medium2024-05-23

Silverstripe Missing security check on dev/build/defaults

GHSA-x5w2-wcr8-9q45

medium2024-05-23

Silverstripe HtmlEditor embed url sanitisation

GHSA-qp29-wcc2-vmpc

medium2024-05-23

Silverstripe Form field validation message XSS vulnerability

GHSA-j982-5jv7-v43r

medium2024-05-23

Silverstripe framework is vulnerable to XSS in install.php

GHSA-mqf5-275h-gf6r

medium2024-05-23

SilverStripe Vulnerability on 'isDev', 'isTest' and 'flush' $_GET validation

GHSA-g4hp-pfvf-vm5w

medium2024-05-23

Silverstripe XSS in dev/build returnURL Parameter

GHSA-hq4p-5mpr-jj9m

medium2024-05-23

Silverstripe External redirection risk in Security?ReturnURL

GHSA-vp8p-c6xj-xpj7

high2024-05-23

Silverstripe X-Forwarded-Host request hostname injection

GHSA-25gq-jvx2-vg9x

medium2024-05-23

Silverstripe XSS in Director::force_redirect()

GHSA-jqp8-v74p-g8px

medium2024-05-23

Silverstripe XSS In FormAction

GHSA-4h54-vwx9-3vr3

medium2024-05-23

Silverstripe XSS In GridField print

GHSA-88jp-9jrv-6368

medium2024-05-23

Silverstripe XSS in TreeDropdownField and TreeMultiSelectField

GHSA-r32j-mr8p-hfp8

medium2024-05-23

SilverStripe framework XML Quadratic Blowup Attack

GHSA-g43w-98wp-m694

medium2024-05-23

Silverstripe IE requests not properly behaving with rewritehashlinks

GHSA-5f5v-5c3v-gw5v

medium2024-01-23

Record titles for restricted records can be viewed if exposed by GridFieldAddExistingAutocompleter

GHSA-qm2j-qvq3-j29v · CVE-2023-48714

low2023-07-31

Silverstripe Framework: Members with no password can be created and bypass custom login forms

GHSA-36xx-7vf6-7mv3 · CVE-2023-32302