CVE-2023-22728

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, the GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorise...

CVE-2023-22728 Silverstripe Framework has missing permission check of canView in GridFieldPrintButton

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, the GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorise...

silverstripe framework 安全漏洞

silverstripe framework is a CMS web framework. A security vulnerability exists in Silverstripe Framework version 4.12.5 and prior versions, which stems from the GridField print view incorrectly validating the permissions of DataObjects. An attacker could use this vulnerability to view records tha...