PT-2022-26676 · Silverstripe · Silverstripe/Subsites

Bauke Zwaan · Published 2022-12-19 · Updated 2023-01-03 · CVE-2022-42949

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Silverstripe silverstripe/subsites versions through 2.6.0

Description The subsites module can weaken edit restrictions on some files, allowing a malicious user to edit files they do not have edit rights to. This issue only affects projects with the subsites module installed. It is important to note that the separation of content achieved with the subsites module should be viewed as cosmetic and not appropriate for security-critical applications.

Recommendations For versions through 2.6.0, consider disabling the subsites module until a patch is available to prevent malicious users from editing files they do not have edit rights to. Restrict access to custom file logic to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2022-42949

GHSA-CX45-565Q-6QX8

Affected Products

Silverstripe/Subsites

References · 10

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/subsites/CVE-2022-42949.yaml · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-42949 · Security Note
• https://silverstripe.org/download/security-releases/cve-2022-42949 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-cx45-565q-6qx8 · Vendor Advisory
• https://silverstripe.org/download/security-releases · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-42949 · Vendor Advisory
• https://github.com/silverstripe/silverstripe-subsites/commit/73f3d15bfb90ba779dd5498fcc5ae4ab292d6272 · Note
• https://github.com/silverstripe/silverstripe-subsites · Note
• https://t.me/cvenotify/41188 · Telegram Post
• https://t.me/cibsecurity/55033 · Telegram Post