Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47162
HistoryMay 24, 2024 - 7:22 a.m.

Improper Authorization

2024-05-2407:22:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
improper authorization
sitetree object creation
unauthorized users

6.9 Medium

AI Score

Confidence

High

silverstripe/cms is vulnerable to Improper Authorization. The vulnerability is due to insufficient permission checks during SiteTree object creation, allowing unauthorized users to create new SiteTree objects.

6.9 Medium

AI Score

Confidence

High