4 matches found
Missing permission check of canView in GridFieldPrintButton
The GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorised to access. Upgrade to silverstripe/framework 4.12.5 or above to address the issue. Reported by Stephan Bauer from relaxt...
4.3CVSS5.9AI score0.00486EPSS
SaveExploits0References6Affected Software1
20