CyberSec.Space Logo
Back to CVE Browser

CVE-2019-5715

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1290%
EPSS Percentile41.60th
PublishedApr 11, 2019
Last ModifiedNov 21, 2024

Vulnerability Description

All versions of SilverStripe 3 prior to 3.6.7 and 3.7.3, and all versions of SilverStripe 4 prior to 4.0.7, 4.1.5, 4.2.4, and 4.3.1 allows Reflected SQL Injection through Form and DataObject.

Affected Platforms (CPE)

📦
Silverstripe

Silverstripe

>= 3.0.0 and < 3.6.7
📦
Silverstripe

Silverstripe

>= 3.7.0 and < 3.7.3
📦
Silverstripe

Silverstripe

>= 4.0.0 and < 4.0.7
📦
Silverstripe

Silverstripe

>= 4.1.0 and < 4.1.5
📦
Silverstripe

Silverstripe

>= 4.2.0 and < 4.2.4
📦
Silverstripe

Silverstripe

= 4.3.0

References & Advisories

🔗 https://www.silverstripe.org/download/security-releases/
🔗 https://www.silverstripe.org/download/security-releases/ss-2018-021
🔗 https://www.silverstripe.org/download/security-releases/
🔗 https://www.silverstripe.org/download/security-releases/ss-2018-021

Related Vulnerabilities

CVE-2007-232110.0

Unspecified vulnerability in the search functionality in SilverStripe 2.0.0 has unknown impact and attack vectors.

CVE-2019-122049.8

In SilverStripe through 4.3.3, a missing warning about leaving install.php in a public webroot can lead to unauthenticated admin a...

CVE-2019-124378.8

In SilverStripe through 4.3.3, the previous fix for SS-2018-007 does not completely mitigate the risk of CSRF in GraphQL mutations...

CVE-2020-93098.8

Silverstripe CMS through 4.5 can be susceptible to script execution from malicious upload contents under allowed file extensions (...