PT-2022-24239 · Silverstripe · Silverstripe/Framework

Nhienit · Published 2022-11-21 · Updated 2024-10-06 · CVE-2022-38147

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Silverstripe silverstripe/framework versions 4.11 and earlier

Description The issue allows for XSS attacks. A malicious content author could upload a GPX file with a Javascript payload. The payload could then be executed by luring a legitimate user to view the file in a browser with support for GPX files. GPX is an XML-based format used to store GPS data.

Recommendations For versions 4.11 and earlier, consider disabling the upload of GPX files to the assets area as a temporary workaround until a patch is available. By default, Silverstripe CMS will no longer allow GPX files to be uploaded to the assets area, so ensuring this default setting is in place can help mitigate the risk.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-38147

GHSA-VV3R-FXQP-VR3F

Affected Products

Silverstripe/Framework

References · 11

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/assets/CVE-2022-38147.yaml · Exploit
• https://silverstripe.org/download/security-releases/CVE-2022-38147 · Vendor Advisory
• https://silverstripe.org/blog/tag/release · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vv3r-fxqp-vr3f · Vendor Advisory
• https://forum.silverstripe.org/c/releases · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-38147 · Security Note
• https://osv.dev/vulnerability/CVE-2022-38147 · Vendor Advisory
• https://silverstripe.org/download/security-releases · Vendor Advisory
• https://t.me/cibsecurity/53392 · Telegram Post
• https://twitter.com/phth0nus/status/1843034169074729008 · Twitter Post
• https://silverstripe.org/download/security-releases/cve-2022-38147 · Note