Packagist/silverstripe/framework CVE-2020-9280: high 7.5, EPSS 1.73%

SilverStripe Folders migrated from 3.x may be unsafe to upload to

Action: Upgrade silverstripe/framework to 4.4.6 or later.

composer require silverstripe/framework:4.4.6

Affected

Fixed versions

Sources

• osv: GHSA-592m-4533-rxq9
• https://nvd.nist.gov/vuln/detail/CVE-2020-9280
• https://github.com/silverstripe/silverstripe-assets/commit/6779fd3c8c1c05a3db5035bf6e541c9483d161fc
• https://github.com/silverstripe/silverstripe-userforms/commit/3bbad2044279ade5e5a5d0ae1822bafe479f8a26
• https://forum.silverstripe.org/c/releases
• https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/assets/CVE-2020-9280.yaml
• https://github.com/silverstripe/silverstripe-framework
• https://www.silverstripe.org/download/security-releases
• https://www.silverstripe.org/download/security-releases/cve-2020-9280

CVE-2020-9280 · published 2022-05-24T17:15:19Z · modified 2024-04-25T21:26:37.612295Z · JSON