Symbiote Silverstripe-Versionedfiles vulnerabilities

1 known vulnerability affecting symbiote/silverstripe-versionedfiles.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2019-16409MEDIUM≥ 0, ≤ 2.0.32019-11-12

CVE-2019-16409 [MEDIUM] CWE-200 SilverStripe Versioned Files module Unpublished files are exposed publicly SilverStripe Versioned Files module Unpublished files are exposed publicly In the Versioned Files module through 2.0.3 for SilverStripe 3.x, unpublished versions of files are publicly exposed to anyone who can guess their URL. This guess could be highly informed by a basic understanding of the symbiote/silverstripe-versionedfiles source code. (Users who upgrade from SilverStripe 3.x to 4.x