CVE-2022-42949

The CVE-2022-42949 issue affects SilverStripe subsites up to version 2.6.0. Root cause: the subsites module can weaken edit restrictions on certain files, allowing a malicious user to edit files they should not have rights to. Impact: unauthorized edits within subsites-enabled projects; no detail...