GHSA-g4hp-pfvf-vm5w

Summary

SilverStripe Vulnerability on 'isDev', 'isTest' and 'flush' $_GET validation

Severity

medium

Published

2024-05-23

References

• https://github.com/silverstripe/silverstripe-framework/commit/a978b891e13d22dddee7e0735a7032f13964447d
• https://github.com/silverstripe/silverstripe-framework/commit/cb6717c3f85753bdc30087f280720c6d3f639ff3
• https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2015-014-1.yaml

Related advisories

• GHSA-8v6m-7f5v-hhx6 — critical · Packagist/silverstripe/framework
• GHSA-265q-222x-52m6 — high · Packagist/silverstripe/framework
• GHSA-cwgq-83w5-8jfq — high · Packagist/silverstripe/framework
• GHSA-vcg6-8fxc-x5cq — high · Packagist/silverstripe/framework
• GHSA-vgxh-x8jv-hmff — high · Packagist/silverstripe/framework
• GHSA-m5q3-mvcr-gc5m — high · Packagist/silverstripe/framework
• GHSA-xx4r-5265-48j6 — high · Packagist/silverstripe/framework
• GHSA-mqjc-x563-c9q8 — high · Packagist/silverstripe/framework

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity