Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Stephan Bauer

Researcher fromrelaxt Webdienstleistungsagentur GmbH
#50972of 53,630
4.3Total CVSS
Vulnerabilities · 1
PT-2023-18669
4.3
2023-04-26
Silverstripe · Silverstripe/Framework · CVE-2023-22728
**Name of the Vulnerable Software and Affected Versions** Silverstripe Framework versions prior to 4.12.15 **Description** The GridField print view incorrectly validates the permission of DataObjects, potentially allowing a content author to view records they are not authorized to access. **Recommendations** For versions prior to 4.12.15, upgrade to Silverstripe Framework 4.12.15 or above to address the issue. As a temporary workaround, consider restricting access to the GridField print view until a patch is available.