Silverstripe Recipe-Cms vulnerabilities

1 known vulnerability affecting silverstripe/recipe-cms.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2020-6165MEDIUM≥ 4.5.0, < 4.5.32022-05-24

CVE-2020-6165 [MEDIUM] CWE-276 Silverstripe has Incorrect Default Permissions Silverstripe has Incorrect Default Permissions SilverStripe 4.5.0 allows attackers to read certain records that should not have been placed into a result set. This affects silverstripe/recipe-cms. The automatic permission-checking mechanism in the silverstripe/graphql module does not provide complete protection against lists that are limited (e.g., through pagination), resulting in records that should have failed a pe

Silverstripe Recipe-Cms vulnerabilities | cvebase