CVE-2019-12617

In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution...

CVE-2019-12617

CVE-2019-12617 affects SilverStripe prior to or including version 4.3.3, with an access escalation vulnerability where CMS users with limited permissions can gain higher privileges due to a permission cache pollution issue. The connected records consistently describe “permission cache pollution” ...