silverstripe/subsites Unsafe SQL Query Construction (Safe Data Source)

2024-05-2818:23:17

CWE-89

GitHub Advisory Database

github.com

sql injection

vulnerability

silverstripe/subsites

version 2.1.1

fixed

AI Score

8.2

Confidence

Low

There is a low level potential SQL injection vulnerability in the silverstripe/subsites module has been identified and fixed in version 2.1.1.

Affected configurations

Vulners

Node

silverstripesubsitesRange2.0.0–2.1.1

VendorProductVersionCPE
silverstripesubsites*cpe:2.3:a:silverstripe:subsites:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
silverstripe	subsites	*	cpe:2.3:a:silverstripe:subsites::::::::

github.com/advisories/GHSA-xc69-p8fc-m6m5

github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/subsites/SS-2018-016-1.yaml

github.com/silverstripe/silverstripe-subsites/commit/bf2c81dce62ae9a7623d224fd31a39505260eb57

www.silverstripe.org/download/security-releases/ss-2018-016

AI Score

8.2

Confidence

Low