Back to CVE Browser

CVE-2019-12437

HIGH

8.8

CVSS Severity Score

EPSS Score0.0670%

EPSS Percentile41.93th

PublishedFeb 19, 2020

Last ModifiedNov 21, 2024

Vulnerability Description

In SilverStripe through 4.3.3, the previous fix for SS-2018-007 does not completely mitigate the risk of CSRF in GraphQL mutations,

Affected Platforms (CPE)

📦

Silverstripe

Silverstripe

<= 4.3.3

References & Advisories

🔗 https://forum.silverstripe.org/c/releases

🔗 https://www.silverstripe.org/blog/tag/release

🔗 https://www.silverstripe.org/download/security-releases/

🔗 https://forum.silverstripe.org/c/releases

🔗 https://www.silverstripe.org/blog/tag/release

🔗 https://www.silverstripe.org/download/security-releases/

Related Vulnerabilities

CVE-2007-232110.0

Unspecified vulnerability in the search functionality in SilverStripe 2.0.0 has unknown impact and attack vectors.

CVE-2019-122049.8

In SilverStripe through 4.3.3, a missing warning about leaving install.php in a public webroot can lead to unauthenticated admin a...

CVE-2019-57159.8

All versions of SilverStripe 3 prior to 3.6.7 and 3.7.3, and all versions of SilverStripe 4 prior to 4.0.7, 4.1.5, 4.2.4, and 4.3....

CVE-2020-93098.8

Silverstripe CMS through 4.5 can be susceptible to script execution from malicious upload contents under allowed file extensions (...