Lucene search

K
friendsofphpOpenJS FoundationFRIENDSOFPHP:SILVERSTRIPE:REPORTS:CVE-2024-29885
HistoryJul 17, 2024 - 12:24 a.m.

CVE-2024-29885 - Reports are still accessible even when canView is set to false

2024-07-1700:24:42
OpenJS Foundation
github.com
2
accessibility
reports
security

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

6.8

Confidence

Low

Affected configurations

Vulners
Node
silverstriperegistryRange<5.2.3silverstripe
VendorProductVersionCPE
silverstriperegistry*cpe:2.3:a:silverstripe:registry:*:*:*:*:*:silverstripe:*:*

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

6.8

Confidence

Low

Related for FRIENDSOFPHP:SILVERSTRIPE:REPORTS:CVE-2024-29885