Lucene search

GitHub Advisory DatabaseGHSA-FH35-P8PH-P545

HistoryMay 14, 2022 - 2:48 a.m.

Silverstripe CMS Open Redirect

2022-05-1402:48:26

CWE-601

GitHub Advisory Database

github.com

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.004 Low

EPSS

Percentile

73.0%

JSON

Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the returnURL parameter to dev/build.

Affected configurations

Vulners

Node

silverstripeframeworkRange≤3.1.13

silverstriperegistryRange≤3.1.13silverstripe

CPENameOperatorVersion
silverstripe/frameworkle3.1.13
silverstripe/cmsle3.1.13

CPE	Name	Operator	Version
	silverstripe/framework	le	3.1.13
	silverstripe/cms	le	3.1.13

References

hyp3rlinx.altervista.org/advisories/AS-SILVERSTRIPE0607.txt

packetstormsecurity.com/files/132223/SilverStripe-CMS-3.1.13-XSS-Open-Redirect.html

github.com/advisories/GHSA-fh35-p8ph-p545

nvd.nist.gov/vuln/detail/CVE-2015-5062

web.archive.org/web/20200228091958/www.securityfocus.com/bid/75419

web.archive.org/web/20201209000421/www.securityfocus.com/archive/1/535716/100/0/threaded

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.004 Low

EPSS

Percentile

73.0%

JSON

Related for GHSA-FH35-P8PH-P545