Packagist/silverstripe/framework: medium 4.3

Silverstripe CSRF vulnerability in GridFieldAddExistingAutocompleter

Action: Upgrade silverstripe/framework to 3.1.17 or later.

composer require silverstripe/framework:3.1.17

composer require silverstripe/framework:3.2.2

composer require silverstripe/framework:3.3.0

Affected

Fixed versions

Sources

• osv: GHSA-2hpc-mf4q-j885
• https://github.com/silverstripe/silverstripe-framework/commit/013524af5069bb0cf909853f04418d9bef56d18c
• https://github.com/silverstripe/silverstripe-framework/commit/56e92f5a32e45849cc9361c8603c31d7010c9d36
• https://github.com/silverstripe/silverstripe-framework/commit/e2c77c5a8f13e901c51a3684210811559b592f0c
• https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2016-002-1.yaml
• https://github.com/silverstripe/silverstripe-framework
• https://www.silverstripe.org/download/security-releases/ss-2016-002

published 2024-05-23T19:19:33Z · modified 2024-11-28T05:23:17.093348Z · JSON