Lucene search

K
githubGitHub Advisory DatabaseGHSA-G4HP-PFVF-VM5W
HistoryMay 23, 2024 - 5:23 p.m.

SilverStripe Vulnerability on 'isDev', 'isTest' and 'flush' $_GET validation

2024-05-2317:23:55
CWE-639
GitHub Advisory Database
github.com
10
silverstripe
vulnerability
$_get validation
security
token
parameter
authentication
denial of service

7.2 High

AI Score

Confidence

High

When a secure token parameter is provided to a SilverStripe site (such as isDev or flush) an empty token parameter can be provided in order to bypass normal authentication parameters.

For instance, http://www.mysite.com/?isDev=1&isDevtoken will force a site to dev mode. Alternatively, “flush” could also be used in succession to cause excessive load on a victim site and risk denial of service.

The fix in this case is to ensure that empty tokens fail the validation check.

Affected configurations

Vulners
Node
silverstripeframeworkRange<3.1.13
OR
silverstripeframeworkRange3.0.13

7.2 High

AI Score

Confidence

High