Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47210

HistoryMay 28, 2024 - 6:06 a.m.

URL Injection

2024-05-2806:06:33

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

1

url injection

silverstripe

vulnerability

internet explorer

javascript

ssviewer::process()

7.4 High

AI Score

Confidence

Low

silverstripe/framework is vulnerable to a URL Injection vulnerability. The vulnerability is due to improper encoding of entities in the URL string, specifically in requests coming from Internet Explorer, which allows malicious JavaScript code to be directly inserted into the output content by SSViewer::process() when rewriting hashlinks.

7.4 High

AI Score

Confidence

Low