Packagist/silverstripe/framework CVE-2023-22729: medium 6.1, EPSS 0.42%

Open redirect vulnerability on CMSSecurity relogin screen

Action: Upgrade silverstripe/framework to 4.12.5 or later.

composer require silverstripe/framework:4.12.5

Affected

Fixed versions

Sources

• osv: GHSA-fw84-xgm8-9jmv
• https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-fw84-xgm8-9jmv
• https://nvd.nist.gov/vuln/detail/CVE-2023-22729
• https://github.com/silverstripe/silverstripe-framework/commit/1a5bb4cbece1721203977910b8ecd8b79c18dc77
• https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/CVE-2023-22729.yaml
• https://github.com/silverstripe/silverstripe-framework
• https://www.silverstripe.org/download/security-releases/cve-2023-22729

CVE-2023-22729 · published 2023-04-26T19:46:30Z · modified 2024-02-16T08:21:20.173371Z · JSON