CVE-2019-5715

CVE-2019-5715 affects SilverStripe Framework. Affected: SilverStripe 3 versions before 3.6.7 and 3.7.3, and SilverStripe 4 versions before 4.0.7, 4.1.5, 4.2.4, and 4.3.1. Description: Reflected SQL Injection through Form and DataObject. Root cause: input data in forms/DataObject is reflected into...

CVE-2019-5715: Reflected SQL Injection through Form and DataObject

More info at https://www.silverstripe.org/download/security-releases/ss-2018-021...