PT-2022-24237 · Silverstripe · Silverstripe/Framework

Tf1T · Published 2022-11-22 · Updated 2022-11-30 · CVE-2022-38145

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Silverstripe silverstripe/framework versions through 4.11

Description The issue allows remote attackers to execute a Javascript payload in the versioned history compare view by adding it to a page's meta description. This can be done by a malicious content author who has access to the CMS. The attacker must then convince a privileged user to access the version history for that page.

Recommendations For versions through 4.11, consider restricting access to the versioned history compare view until a patch is available. As a temporary workaround, limit the ability for content authors to add Javascript payloads to page meta descriptions. Ensure that only trusted users have access to the CMS to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-38145

GHSA-66JF-XM2M-7M8R

Affected Products

Silverstripe/Framework

References · 10

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/versioned-admin/CVE-2022-38145.yaml · Exploit
• https://osv.dev/vulnerability/GHSA-66jf-xm2m-7m8r · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-38145 · Security Note
• https://silverstripe.org/blog/tag/release · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-38145 · Vendor Advisory
• https://forum.silverstripe.org/c/releases · Vendor Advisory
• https://silverstripe.org/download/security-releases/CVE-2022-38145 · Vendor Advisory
• https://silverstripe.org/download/security-releases · Vendor Advisory
• https://silverstripe.org/download/security-releases/cve-2022-38145 · Note
• https://t.me/cibsecurity/53402 · Telegram Post