CVE-2024-29885

The CVE-2024-29885 entry concerns the silverstripe/reports API in the Silverstripe Framework, where reports could be accessed via direct URLs by any user with access to the reports admin section, even if canView() returns false. This is an Authorization Bypass affecting the Reports component; the...