PT-2020-10137 · Silverstripe · Silverstripe Cms+1

Memn0Ps + 2 · Published 2020-07-15 · Updated 2022-05-24 · CVE-2019-19326

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Silverstripe CMS versions prior to 4.5 Silverstripe versions prior to 4.5

Description The issue allows for web cache poisoning through the modification of the X-Original-Url and X-HTTP-Method-Override headers. This can lead to responses with malicious HTTP headers being returned to other consumers of the cached response.

Recommendations For Silverstripe CMS versions prior to 4.5, consider disabling HTTP Cache Headers on responses served by the framework's HTTP layer as a temporary workaround until a patch is available. Restrict access to the HTTPRequestBuilder to minimize the risk of exploitation.

Exploit

Fix

HTTP Request/Response Smuggling

Weakness Enumeration

CWE-444

Related Identifiers

CVE-2019-19326

GHSA-Q9FF-3Q93-FM8M

Affected Products

Silverstripe

Silverstripe Cms

References · 9

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/CVE-2019-19326.yaml · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-19326 · Security Note
• https://osv.dev/vulnerability/CVE-2019-19326 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-q9ff-3q93-fm8m · Vendor Advisory
• https://silverstripe.org/download/security-releases/CVE-2019-19326 · Vendor Advisory
• https://github.com/silverstripe/silverstripe-framework/commit/98926e4e6c26d1d43bb1faf516d15bdb2739556e · Note
• https://github.com/silverstripe/silverstripe-framework/commit/107706c12cd9cf4d1b8b96b6a6e223633209d851 · Note
• https://github.com/silverstripe/silverstripe-framework/commit/8518987cbd1eaca71b65dd4a4b35591db941509a · Note
• https://github.com/silverstripe/silverstripe-framework · Note