SilverStripe Web Cache Poisoning through HTTPRequestBuilder

🗓️ 24 May 2022 17:22:55Reported by GitHub Advisory DatabaseType

SilverStripe 4.4.4 Web Cache Poisonin

Reporter	Title	Published	Views	Family All 11
CNVD	SilverStripe Environment Issues Vulnerabilities	22 Jul 202000:00	–	cnvd
CVE	CVE-2019-19326	15 Jul 202018:54	–	cve
Cvelist	CVE-2019-19326	15 Jul 202018:54	–	cvelist
EUVD	EUVD-2022-4928	3 Oct 202520:07	–	euvd
Friends Of PHP	CVE-2019-19326: Web Cache Poisoning through HTTPRequestBuilder	10 Jul 202014:57	–	friendsofphp
NVD	CVE-2019-19326	15 Jul 202019:15	–	nvd
OSV	GHSA-Q9FF-3Q93-FM8M SilverStripe Web Cache Poisoning through HTTPRequestBuilder	24 May 202217:22	–	osv
Prion	Design/Logic Flaw	15 Jul 202019:15	–	prion
Positive Technologies	PT-2020-10137	15 Jul 202000:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2019-19326: Inconsistent Interpretation of HTTP Requests	15 Jul 202000:00	–	rapid7

Vulners

Node

silverstripe frameworkRange3.0.0–3.7.5composer

silverstripe frameworkRange4.5.0–4.5.4composer

silverstripe frameworkRange4.0.0–4.4.7composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-19326
silverstripe	www.silverstripe.org/download/security-releases/CVE-2019-19326
github	www.github.com/silverstripe/silverstripe-framework/commit/107706c12cd9cf4d1b8b96b6a6e223633209d851
github	www.github.com/silverstripe/silverstripe-framework/commit/8518987cbd1eaca71b65dd4a4b35591db941509a
github	www.github.com/silverstripe/silverstripe-framework/commit/98926e4e6c26d1d43bb1faf516d15bdb2739556e
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/CVE-2019-19326.yaml
github	www.github.com/advisories/GHSA-q9ff-3q93-fm8m

22 May 2024 19:22Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.3

CVSS 3.15.9

EPSS0.00758