CVE-2019-19326

Silverstripe CMS sites through 4.4.4 which have opted into HTTP Cache Headers on responses served by the framework's HTTP layer can be vulnerable to web cache poisoning. Through modifying the X-Original-Url and X-HTTP-Method-Override headers, responses with malicious HTTP headers can return...

CVE-2019-19326

Silverstripe CMS sites through 4.4.4 which have opted into HTTP Cache Headers on responses served by the framework's HTTP layer can be vulnerable to web cache poisoning. Through modifying the X-Original-Url and X-HTTP-Method-Override headers, responses with malicious HTTP headers can return...

CVE-2019-19326

CVE-2019-19326 affects SilverStripe CMS up to release 4.4.4 where HTTP Cache Headers enabled in the framework’s HTTP layer can be abused to poison web caches. By manipulating headers such as X-Original-Url and X-HTTP-Method-Override, an attacker can cause cached responses to include malicious HTT...