CVE-2022-29858
Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control that allows protected images to be published by changing an exi...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control that allows protected images to be published by changing an existing image short code on website content.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web forum.silverstripe.org
- web huntr.dev
- web silverstripe.org
- web silverstripe.org
- web silverstripe.org