silverstripe/framework has Cross-site Scripting vulnerability in RedirectorPage

2024-05-2720:05:34

Google

osv.dev

cross-site scripting

redirectorpage

vulnerability

browser

security

validation

7.2 High

AI Score

Confidence

Low

JSON

RedirectorPage will allow users to specify a non-url malicious script as the redirection path without validation. Users which follow this url may allow this script to execute within their browser.

CPENameOperatorVersion
silverstripe/frameworkeq3.4.1-rc2
silverstripe/frameworkeq3.5.0-rc1
silverstripe/frameworkeq3.5.3-rc1
silverstripe/frameworkeq3.4.0-rc1
silverstripe/frameworkeq3.5.4-rc1
silverstripe/frameworkeq3.5.2-rc1
silverstripe/frameworkeq3.4.2
silverstripe/frameworkeq3.5.1-rc2
silverstripe/frameworkeq3.5.0
silverstripe/frameworkeq3.5.1-rc1

Name	Operator	Version
silverstripe/framework	eq	3.4.1-rc2
silverstripe/framework	eq	3.5.0-rc1
silverstripe/framework	eq	3.5.3-rc1
silverstripe/framework	eq	3.4.0-rc1
silverstripe/framework	eq	3.5.4-rc1
silverstripe/framework	eq	3.5.2-rc1
silverstripe/framework	eq	3.4.2
silverstripe/framework	eq	3.5.1-rc2
silverstripe/framework	eq	3.5.0
silverstripe/framework	eq	3.5.1-rc1

Rows per page:

1-10 of 261

References

github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2017-003-1.yaml

github.com/silverstripe/silverstripe-framework

www.silverstripe.org/download/security-releases/ss-2017-003

7.2 High

AI Score

Confidence

Low

JSON