Packagist/silverstripe/restfulserver CVE-2019-12149: critical 9.8, EPSS 1.35%

silverstripe restfulserver and registry modules SQL injection vulnerability

Action: Upgrade silverstripe/restfulserver to 1.0.9 or later.

composer require silverstripe/restfulserver:2.1.2

composer require silverstripe/restfulserver:1.0.9

composer require silverstripe/restfulserver:2.0.4

Affected

Fixed versions

Sources

• osv: GHSA-4j6v-3895-8g2j
• https://nvd.nist.gov/vuln/detail/CVE-2019-12149
• https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/restfulserver/CVE-2019-12149.yaml
• https://www.silverstripe.org/download/security-releases/cve-2019-12149

CVE-2019-12149 · published 2022-05-24T16:47:47Z · modified 2024-04-25T20:42:21.901464Z · JSON