PT-2024-40089 · Silverstripe · Silverstripe-Secureassets+1

Published 2024-05-28 · Updated 2024-05-28

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: silverstripe-userforms versions prior to 3.0.0 silverstripe-userforms version 3.0.0 when used with silverstripe-secureassets module

Description: The issue allows CMS administrators to create public-facing forms with file upload abilities, which can lead to predictable public paths for uploaded files unless configured otherwise. Certain actions by CMS authors can expose the file path, such as submission notification emails containing links to the file without authorization checks.

Recommendations: For silverstripe-userforms versions prior to 3.0.0, consider disabling the file upload field to prevent exploitation until a secure configuration can be applied. For silverstripe-userforms version 3.0.0 used with the silverstripe-secureassets module, ensure that all upload fields point to secured folders to apply secure permissions automatically. As a temporary workaround, consider restricting access to the submission notification emails or disabling the links to uploaded files within these emails until a more secure configuration is implemented.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

GHSA-55PP-293F-3365

Affected Products

Silverstripe-Secureassets

Silverstripe-Userforms

References · 4

• https://osv.dev/vulnerability/GHSA-55pp-293f-3365 · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/userforms/SS-2015-018-1.yaml · Note
• https://github.com/silverstripe/silverstripe-userforms · Note
• https://silverstripe.org/software/download/security-releases/ss-2015-018 · Note