CVE-2019-12437
HIGH
8.8
CVSS Severity Score
Vulnerability Description
In SilverStripe through 4.3.3, the previous fix for SS-2018-007 does not completely mitigate the risk of CSRF in GraphQL mutations,
Affected Platforms (CPE)
📦
Silverstripe
返回 CVE 瀏覽器
相關漏洞威脅
CVE-2007-232110.0
Unspecified vulnerability in the search functionality in SilverStripe 2.0.0 has unknown impact and attack vectors.
CVE-2019-122049.8
In SilverStripe through 4.3.3, a missing warning about leaving install.php in a public webroot can lead to unauthenticated admin a...
CVE-2019-57159.8
All versions of SilverStripe 3 prior to 3.6.7 and 3.7.3, and all versions of SilverStripe 4 prior to 4.0.7, 4.1.5, 4.2.4, and 4.3....
CVE-2020-93098.8
Silverstripe CMS through 4.5 can be susceptible to script execution from malicious upload contents under allowed file extensions (...