Lucene search
+L

CVE-2020-6165

🗓️ 15 Jul 2020 20:27:39Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 77 Views🌐 WEB

SilverStripe 4.5.0 vulnerability allows unauthorized access to certain records

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB
CVE-2020-6165
15 Jul 202021:15
attackerkb
cnvd
CNVD
SilverStripe has an unspecified vulnerability (CNVD-2020-44912)
28 Jul 202000:00
cnvd
cvelist
Cvelist
CVE-2020-6165
15 Jul 202020:27
cvelist
euvd
EUVD
EUVD-2022-2534
3 Oct 202520:07
euvd
friendsofphp
Friends Of PHP
CVE-2020-6165: Limited queries break CanViewPermissionChecker
10 Jul 202017:54
friendsofphp
github
Github Security Blog
Silverstripe has Incorrect Default Permissions
24 May 202217:23
github
nvd
NVD
CVE-2020-6165
15 Jul 202021:15
nvd
osv
OSV
BIT-SILVERSTRIPE-2020-6165
6 Mar 202411:06
osv
osv
OSV
GHSA-589Q-75R3-MFQ4 Silverstripe has Incorrect Default Permissions
24 May 202217:23
osv
prion
Prion
Default credentials
15 Jul 202021:15
prion
Rows per page
NVD
Node
OR
silverstripesilverstripeRange3.2.03.2.4
silverstripesilverstripeRange3.2.53.3.0
silverstripesilverstripeRange4.5.04.5.3
ParameterPositionPathDescriptionCWE
queryrequest bodyadmin/graphqlPrivilege disclosure via GraphQL at admin/graphql where permission checks may not fully protect against lists limited by pagination, potentially exposing records that should be inaccessible.CWE-276
queryrequest bodygraphqlPotential exploitation through custom GraphQL endpoints under /graphql that could be reachable without authentication, allowing reading of records that should be protected.CWE-276

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 03:22Current
5.1Medium risk
Vulners AI Score5.1
CVSS 25
CVSS 3.15.3
EPSS0.01066
77