p PatchFirst

PatchFirst · Latest vulnerabilities

symbiote/silverstripe-multivaluefield vulnerabilities

Vulnerabilities published for symbiote/silverstripe-multivaluefield in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. GHSA-g5vj-wj9x-4jg9

    Medium · CVSS 6.1Fix available

    symbiote/silverstripe-multivaluefield Possible PHP Object Injection via Multi-Value Field Extension

    A potential deserialisation vulnerability has been identified in the symbiote/silverstripe-multivaluefield which could allow an attacker to exploit implementations of this module via object injection. Support for handling PHP objects as values in this module has been deprecated, and the serialisation technique has been switched to using JSON for handling arrays. As well as this, a potential XSS (cross-site scripting) vulnerability has been identified and remediated.

    symbiote/silverstripe-multivaluefieldPHP
    • Update to 3.1.0
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →