GHSA-m5q3-mvcr-gc5m
GHSA-m5q3-mvcr-gc5m · silverstripe/framework BackURL validation bypass with malformed URLs
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A carefully constructed malformed URL can be used to circumvent the offsite redirection protection used on `BackURL` parameters. This could lead to users entering sensitive data in malicious websites instead of the intended one.
CVSS 7.5 · High · Fix available
- Published
- Updated
Stack: php
Affected products and versions
silverstripe/framework Packagist
- Versions
- 4.0.0
- 4.0.0-rc1
- 4.0.0-rc2
- 4.0.0-rc3
- 4.0.1
- 4.0.1-rc1
- 4.0.2
- 4.0.3
- Affected ranges
- ECOSYSTEM: ≥ 4.0.0-rc1, < 4.0.4
Update to 4.0.4
silverstripe/framework Packagist
- Versions
- 4.1.0
- 4.1.0-rc1
- 4.1.0-rc2
- Affected ranges
- ECOSYSTEM: ≥ 4.1.0-rc1, < 4.1.1
Update to 4.1.1
Original sources
- https://github.com/silverstripe/silverstripe-framework/commit/9053014a7e2eba28d000881e0bb3cc1d6e6b2eea
- https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2018-008-1.yaml
- https://github.com/silverstripe/silverstripe-framework
- https://www.silverstripe.org/download/security-releases/ss-2018-008
- https://osv.dev/vulnerability/GHSA-m5q3-mvcr-gc5m