Lucene search

K
friendsofphpOpenJS FoundationFRIENDSOFPHP:SILVERSTRIPE:SUBSITES:CVE-2022-42949
HistoryDec 18, 2022 - 10:37 p.m.

CVE-2022-42949 - Subsite weakens file permissions

2022-12-1822:37:00
OpenJS Foundation
github.com
5
subsite weakness
file permissions
cve-2022-42949
vulnerability
silverstripe
security release

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

34.5%

Affected configurations

Vulners
Node
silverstripesubsitesRange<2.6.1
VendorProductVersionCPE
silverstripesubsites*cpe:2.3:a:silverstripe:subsites:*:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

34.5%

Related for FRIENDSOFPHP:SILVERSTRIPE:SUBSITES:CVE-2022-42949