CVE-2020-26138

In SilverStripe through 4.6.0-rc1, a FormField with square brackets in the field name skips validation...

CVE-2020-26138

CVE-2020-26138 affects SilverStripe up to version 4.6.0-rc1, where a FormField with square brackets in the field name can bypass validation. The issue notably involves FileField usage, where array notation may coerce multiple files and bypass validation such as allowed extensions, with potential ...

CVE-2020-26138 FormField: with square brackets in field name skips validation

More info at https://www.silverstripe.org/download/security-releases/cve-2020-26138...