Packagist/silverstripe/forum: medium 5.3
Silverstripe Forum Module CSRF Vulnerability
Action: Upgrade silverstripe/forum to 0.6.2 or later.
composer require silverstripe/forum:0.6.2composer require silverstripe/forum:0.7.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.2 | - |
| 0.7.0 | 0.7.4 | - |
Fixed versions
| 0.6.2 | 0.7.4 |
Sources
- osv: GHSA-w8fq-xgvh-cxc2
- https://github.com/silverstripe-archive/silverstripe-forum/commit/0ec7c92785f36c8edf4a11c36a4fc27e0c40cee6
- https://github.com/silverstripe-archive/silverstripe-forum/commit/efe09f95ccdb0138ce5bd3d3a21b3d9e97038dd8
- https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/forum/SS-2015-017-1.yaml
- https://github.com/silverstripe-archive/silverstripe-forum
- https://www.silverstripe.org/software/download/security-releases/ss-2015-017
published · modified · JSON