Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2023/04/26 7:47 p.m.•49 views

Missing permission check of canView in GridFieldPrintButton

The GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorised to access. Upgrade to silverstripe/framework 4.12.5 or above to address the issue. Reported by Stephan Bauer from relaxt...

4.3CVSS5.9AI score0.00486EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder