logo

Database

Reflected cross-site scripting (XSS) In silverstripe/framework

Description

silverstripe/framework has Cross-site Scripting vulnerability in CMSSecurity BackURL In follow up to SS-2016-001 there is yet a minor unresolved fix to incorrectly encoded URL.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. GCVE-GHSA-r85g-7jpv-8xrx

References

1. https://github.com/silverstripe/silverstripe-framework/commit/6b123fe1c93d3ac976f484192abc31cad4f81d472. https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2016-016-1.yaml3. https://www.silverstripe.org/download/security-releases/ss-2016-016

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.