Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47571

HistoryJun 17, 2024 - 7:21 a.m.

Improper Access Control

2024-06-1707:21:22

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

2

vulnerability

.htaccess rules

php scripts

assets directory

url

access control

AI Score

7

Confidence

High

silverstripe/framework is vulnerable to Improper Access Control. The vulnerability is due to a weakness in the .htaccess rules preventing requests to uploaded PHP scripts, which allows PHP scripts in the assets directory to be executed via a specially crafted URL.

AI Score

7

Confidence

High