CVE-2011-4962
CVE-2011-4962
This page contains facts from public vulnerability sources. Check the original advisory before updating.
code/sitefeatures/PageCommentInterface.php in SilverStripe 2.4.x before 2.4.6 might allow remote attackers to execute arbitrary code via a crafted cookie in a user comment submission, which is not properly handled when it is deserialized.
EPSS 3.9% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
silverstripe/cms Packagist
- Affected ranges
- ECOSYSTEM: ≥ 2.4.0, < 2.4.6
Update to 2.4.6