Framework@3.0.0 Security Vulnerabilities and Issues — Framework@3.0.0 CVE List

Lucene search

SilverstripeFramework3.0.0

3 matches found

CVE•added 2022/11/22 1:15 p.m.•85 views

CVE-2022-38462

Silverstripe silverstripe/framework through 4.11 is vulnerable to XSS by carefully crafting a return URL on a /dev/build or /Security/login request.

6.1CVSS5.9AI score0.00756EPSS

Web

CVE•added 2022/11/23 2:15 a.m.•72 views

CVE-2022-37430

Silverstripe silverstripe/framework through 4.11 allows XSS vulnerability via href attribute of a link (issue 2 of 2).

5.4CVSS5.2AI score0.00327EPSS

CVE•added 2022/11/23 2:15 a.m.•69 views

CVE-2022-37429

Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 2) via JavaScript payload to the href attribute of a link by splitting a javascript URL with white space characters.

5.4CVSS5.1AI score0.00327EPSS