Executive brief
Missing warning can lead to unauthenticated admin access in SilverStripe
Affected products
- Packagist silverstripe/cms
- Packagist silverstripe/framework
Junglewise Threat Intelligence
CVE-2019-12204: Missing warning can lead to unauthenticated admin access in SilverStripe
CVE-2019-12204 · Severity: low · CVSS 3.1 · Published 2019-11-12
Technologies: silverstripe/cms (Packagist), silverstripe/framework (Packagist). Vendors: Packagist.
Related threats
- Silverstripe CMS is an open source content management system. Prior to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scrip
- Silverstripe Framework XSS in Insert media from web functionality
- Silverstripe Framework user enumeration via timing attack on login and password reset forms
- Silverstripe Framework has a XSS vulnerability in HTML editor
- Reflected Cross Site Scripting (XSS) in error message