Silverstripe Framework has open redirect vulnerability on CMSSecurity relogin screen
Résumé
Silverstripe Framework has open redirect vulnerability on CMSSecurity relogin screen
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, an attacker can display a link to a third party website on a login screen by convincing a legitimate content author to follow a specially crafted link. Users should upgrade to Silverstripe Framework 4.12.15 or above to address the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com