PT-2024-40391 · Packagist · Silverstripe/Framework

Published 2024-05-27 · Updated 2024-05-27

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description.

Description The issue arises after a password reset, where the ChangePasswordForm::doChangePassword() function logs in the user without checking Member::canLogIn(). This poses a problem for sites using the extension point in that method to deny access to certain users, such as those not approved or with temporarily revoked access. The Member::canLogIn() function was initially intended to check for locked-out users due to multiple incorrect login attempts but has been expanded for other uses.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

GHSA-P5H2-VR99-XM99

Affected Products

Silverstripe/Framework

References · 8

• https://osv.dev/vulnerability/GHSA-p5h2-vr99-xm99 · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2016-011-1.yaml · Note
• https://github.com/silverstripe/silverstripe-framework/commit/782c18fd13b9fb92707d0ea3b231023204928297 · Note
• https://github.com/silverstripe/silverstripe-framework/commit/6d41db77fa78f473db7bcff389456c980ef4e412 · Note
• https://github.com/silverstripe/silverstripe-framework/commit/2b30ade44d333a4da4d13b31ffa28d0a34597442 · Note
• https://github.com/silverstripe/silverstripe-framework/commit/6606d986634f5b5dec16462acaa8d9a513c29fec · Note
• https://github.com/silverstripe/silverstripe-framework · Note
• https://silverstripe.org/download/security-releases/ss-2016-011 · Note