Silverstripe Cross-site scripting vulnerability in VersionedRequestFilter

2024-05-2319:46:36

CWE-79

GitHub Advisory Database

github.com

silverstripe

versionedrequestfilter

cross-site scripting

vulnerability

error message

html injection

cms login page

6.3 Medium

AI Score

Confidence

High

JSON

A cross-site scripting vulnerability in VersionedRequestFilter has been found.

If an incoming user request should not be able to access the requested stage, an error message is created for display on the CMS login page that they are redirected to. In this error message, the URL of the requested page is interpolated into the error message without being escaped; hence, arbitrary HTML can be injected into the CMS login page.

Affected configurations

Vulners

Node

silverstripeframeworkRange<3.4.1

silverstripeframeworkRange<3.3.3

CPENameOperatorVersion
silverstripe/frameworklt3.4.1
silverstripe/frameworklt3.3.3

CPE	Name	Operator	Version
	silverstripe/framework	lt	3.4.1
	silverstripe/framework	lt	3.3.3

References

github.com/advisories/GHSA-mpqj-f4v3-334h

github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2016-007-1.yaml

github.com/silverstripe/silverstripe-framework/commit/3fa84cf0c64a539d78600c36364817a8e38411d8

github.com/silverstripe/silverstripe-framework/commit/41be95c95a55031412ee4056aeee5c2c69595836

www.silverstripe.org/download/security-releases/ss-2016-007

6.3 Medium

AI Score

Confidence

High

JSON