PT-2024-40233 · Packagist · Silverstripe/Framework

Published 2024-05-27 · Updated 2024-05-27

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned.

Description: An authenticated user with page edit permission can craft HTML that, when rendered in a page history comparison, can execute client scripts.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-C4C3-J73V-634R

Affected Products

Silverstripe/Framework

References · 5

• https://osv.dev/vulnerability/GHSA-c4c3-j73v-634r · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2017-004-1.yaml · Note
• https://github.com/silverstripe/silverstripe-framework/commit/2b72c0f73b668ddf7c059319da915a6c08652278 · Note
• https://github.com/silverstripe/silverstripe-framework · Note
• https://silverstripe.org/download/security-releases/ss-2017-004 · Note