logo

Database

Cross-site request forgery In silverstripe/framework

Description

SilverStripe Denial of Service on flush and development URL tools SilverStripe before 4.4.0 allows a Denial of Service on flush and development URL tools.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2019-122462. NVD-2019-122463. OSV-2019-122464. GCVE-2019-12246

References

1. https://github.com/silverstripe/silverstripe-framework/commit/ca56e8d78e468874b9267c94d8ec75240b6da0ab2. https://forum.silverstripe.org/c/releases3. https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/CVE-2019-12246.yaml4. https://www.silverstripe.org/blog/tag/release5. https://www.silverstripe.org/download/security-releases/cve-2019-12246

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.