Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/05/23 7:14 p.m.14 views

Silverstripe Missing security check on dev/build/defaults

The buildDefaults method on DevelopmentAdmin is missing a permission check. In live mode, if you access /dev/build, you are requested to login first. However, if you access /dev/build/defaults, then the action is performed without any login check. This should be protected in the same way that...

6.9AI score
SaveExploits0References6Affected Software1
Rows per page
Query Builder