Improper Input Validation

2022-03-2807:07:47

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

silverstripe

framework

input validation

filefield

vulnerability

malicious attacker

multiple files

EPSS

0.002

Percentile

51.7%

JSON

silverstripe/framework is vulnerable to improper input validation. The vulnerability exists in the validate function of FileField.php because FileField does not properly validate single file upload which allows a malicious attacker to upload multiple files by adding square brackets.