Silverstripe Silverstripe-Admin vulnerabilities

1 known vulnerability affecting silverstripe/silverstripe-admin.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-49783MEDIUMCVSS 4.3v>= 1.0.0, < 1.13.19v>= 2.0.0, < 2.1.82024-01-23

CVE-2023-49783 [MEDIUM] CWE-863 CVE-2023-49783: Silverstripe Admin provides a basic management interface for the Silverstripe Framework. In versions Silverstripe Admin provides a basic management interface for the Silverstripe Framework. In versions on the 1.x branch prior to 1.13.19 and on the 2.x branch prior to 2.1.8, users who don't have edit or delete permissions for records exposed in a `ModelAdmin` can still edit or delete records using the CSV import form, provided they have create permi