silverstripe/framework vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2019-12246Mediumsilverstripe/framework: SilverStripe Denial of Service on flush and development URL tools CVE-2019-14272Mediumsilverstripe/framework: SilverStripe asset-admin Cross-site Scripting (XSS)CVE-2019-12205Mediumsilverstripe/framework: Silverstripe Flash Clipboard Reflected XSS CVE-2012-4968Mediumsilverstripe/framework: Silverstripe XSS Vulnerabilities CVE-2017-18049Mediumsilverstripe/framework: SilverStripe CSV Excel Macro Injection CVE-2015-5062Mediumsilverstripe/cms: Silverstripe CMS Open Redirect CVE-2010-1593Lowsilverstripe/cms: SilverStripe vulnerable to Cross-site Scripting CVE-2019-5715Criticalsilverstripe/framework: Silverstripe Framework SQLi Vulnerability CVE-2020-26138Mediumsilverstripe/framework: FormField with square brackets in field name skips validation CVE-2022-0227Mediumsilverstripe/framework: Business Logic Errors in SilverStripe Framework CVE-2019-14273Mediumsilverstripe/framework: Broken access control on files CVE-2019-19325Mediumsilverstripe/framework: Reflected XSS in SilverStripe CVE-2019-12617Lowsilverstripe/framework: SilverStripe Priviledge escalation through cache pollution CVE-2019-12245Mediumsilverstripe/framework: Lack of access control on upoaded files CVE-2019-12203Mediumsilverstripe/framework: Session fixation in change password form CVE-2019-12204Criticalsilverstripe/cms: Missing warning can lead to unauthenticated admin access in SilverStripe CVE-2019-16409Mediumsymbiote/silverstripe-versionedfiles: SilverStripe Versioned Files module Unpublished files are exposed publicly

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo