Packagist/silverstripe/cms CVE-2019-12204: critical 9.8, EPSS 1.46%

Missing warning can lead to unauthenticated admin access in SilverStripe

Action: Upgrade silverstripe/cms to 4.4.4 or later.

composer require silverstripe/cms:4.4.4

Affected

Fixed versions

Sources

• osv: GHSA-cg8j-8w52-735v
• https://nvd.nist.gov/vuln/detail/CVE-2019-12204
• https://forum.silverstripe.org/c/releases
• https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/CVE-2019-12204.yaml
• https://packagist.org/packages/silverstripe/cms
• https://packagist.org/packages/silverstripe/framework
• https://www.silverstripe.org/download/security-releases
• https://www.silverstripe.org/download/security-releases/CVE-2019-12204
• https://www.silverstripe.org/download/security-releases/cve-2019-12204

CVE-2019-12204 · published 2019-11-12T23:01:25Z · modified 2024-11-30T05:31:53.249508Z · JSON