Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2024/01/23 1:8 p.m.25 views

CVE-2023-44401 Silverstripe GraqhQL's view permissions are bypassed for paginated lists of ORM data

The Silverstripe CMS GraphQL Server serves Silverstripe data as GraphQL representations. In versions 4.0.0 prior to 4.3.7 and 5.0.0 prior to 5.1.3, canView permission checks are bypassed for ORM data in paginated GraphQL query results where the total number of records is greater than the number o...

5.3CVSS5.4AI score0.00419EPSS
SaveExploits0References2
Rows per page
Query Builder