GHSA-wvfw-w3x6-g526CriticalCVSS 9.8

Silverstripe Framework SQLi Vulnerability

Published
May 14, 2022
Last Modified
February 7, 2024

🔗 CVE IDs covered (1)

CVE-2019-5715 →

📋 Description

All versions of SilverStripe 3 prior to 3.6.7 and 3.7.3, and all versions of SilverStripe 4 prior to 4.0.7, 4.1.5, 4.2.4, and 4.3.1 allows Reflected SQL Injection through Form and DataObject.

🎯 Affected products6

  • composer/silverstripe/framework:>= 4.0.0, < 4.0.7
  • composer/silverstripe/framework:>= 3.7.0, < 3.7.3
  • composer/silverstripe/framework:>= 4.1.0, < 4.1.5
  • composer/silverstripe/framework:>= 4.2.0, < 4.2.4
  • composer/silverstripe/framework:>= 4.3.0, < 4.3.1
  • composer/silverstripe/framework:>= 3.0.0, < 3.6.7

🔗 References (6)