Silverstripe Silverstripe-Assets vulnerabilities

1 known vulnerability affecting silverstripe/silverstripe-assets.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2026-24749MEDIUMCVSS 5.3fixed in 2.4.5v>= 3.0.0-rc1, < 3.1.32026-04-16

CVE-2026-24749 [MEDIUM] CWE-863 CVE-2026-24749: The Silverstripe Assets Module is a required component of Silverstripe Framework. In versions prior The Silverstripe Assets Module is a required component of Silverstripe Framework. In versions prior to 2.4.5 and 3.0.0-rc1 through 3.1.2, images rendered in templates or otherwise accessed via DBFile::getURL() or DBFile::getSourceURL() incorrectly add an access grant to the current session, which bypasses file permissions. This usually happens when c