PT-2020-20568 · Silverstripe · Silverstripe

Ingo Schommer · Published 2020-04-15 · Updated 2024-03-06 · CVE-2020-9280

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SilverStripe versions prior to 4.6

Description The issue affects files uploaded via Forms to folders migrated from Silverstripe CMS 3.x, where they may be put in the default "/Uploads" folder instead of the intended location. This impacts installations that had upload folder protection enabled via the silverstripe/secureassets module under 3.x, which is installed and enabled by default on the Common Web Platform (CWP). The issue only affects files uploaded after an upgrade to 4.x.

Recommendations For SilverStripe versions prior to 4.6, update to version 4.6 or later to resolve the issue.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BIT-SILVERSTRIPE-2020-9280

CVE-2020-9280

GHSA-592M-4533-RXQ9

Affected Products

Silverstripe

References · 11

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/assets/CVE-2020-9280.yaml · Exploit
• https://silverstripe.org/download/security-releases · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-9280 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-silverstripe-2020-9280 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-592m-4533-rxq9 · Vendor Advisory
• https://silverstripe.org/download/security-releases/cve-2020-9280 · Vendor Advisory
• https://forum.silverstripe.org/c/releases · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9280 · Security Note
• https://github.com/silverstripe/silverstripe-framework · Note
• https://github.com/silverstripe/silverstripe-userforms/commit/3bbad2044279ade5e5a5d0ae1822bafe479f8a26 · Note
• https://github.com/silverstripe/silverstripe-assets/commit/6779fd3c8c1c05a3db5035bf6e541c9483d161fc · Note