Packagist/silverstripe/framework: medium 5.4
Silverstripe uses TinyMCE which allows svg files linked in object tags
Action: Upgrade silverstripe/framework to 5.2.16 or later.
composer require silverstripe/framework:5.2.16Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.2.16 | - |
Fixed versions
| 5.2.16 |
Sources
- osv: GHSA-52cw-pvq9-9m5v
- https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-52cw-pvq9-9m5v
- https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2024-001.yaml
- https://github.com/advisories/GHSA-5359-pvf2-pw78
- https://github.com/silverstripe/silverstripe-framework
- https://www.silverstripe.org/download/security-releases/ss-2024-001
published · modified · JSON