CVE-2023-22728: Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, the GridField…

PriorityP421medium4.3CVSS 3.1

AVNACLPRLUINSUCLINAN

EPSS

0.49%

38.2th percentile

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, the GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorised to access. Users should upgrade to Silverstripe Framework 4.12.15 or above to address the issue.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
silverstripe	framework	< 4.12.5	4.12.5
silverstripe	framework	>= 0 < 4.12.5	4.12.5
silverstripe	silverstripe-framework	< 4.12.5	4.12.5

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.