CVE-2019-12246

SilverStripe through 4.3.3 allows a Denial of Service on flush and development URL tools...

CVE-2019-12246

SilverStripe is affected up to version 4.3.3. The vulnerability is a Denial of Service via the flush and development URL tools (e.g., maintenance tools like ?flush, ?isDev, ?isTest, or /dev/*). The issue is documented across multiple feeds (NVD, Red Hat, OSV, GitHub advisory) with DoS capable und...

CVE-2019-12246: Denial of Service on flush and development URL tools

More info at https://www.silverstripe.org/download/security-releases/cve-2019-12246...