Authentication mechanism absence or evasion In silverstripe/framework
Description
ChangePasswordForm doesn't check Member::canLogIn()
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
packagist | 3.2.5, 3.3.3, 3.4.10-stable |
Aliases
1. 2.