PT-2024-40472 · Silverstripe · Silverstripe

Published 2024-05-27 · Updated 2024-05-27

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SilverStripe 4 (affected versions not specified)

Description The issue concerns potentially dangerous file types in the File.allowed extensions configuration, which could allow a malicious CMS user to upload files that get executed in the security context of the website. The default configuration has been updated to remove the ability to upload certain file types, including .css, .js, .potm, .dotm, .xltm, and .jar files. This change also denies access to any existing uploads with these extensions.

Recommendations For SilverStripe 4, review the security guidelines for the Common Web Platform and the File Security guide to find out how to add or remove extensions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

GHSA-VCG6-8FXC-X5CQ

Affected Products

Silverstripe

References · 5

• https://osv.dev/vulnerability/GHSA-vcg6-8fxc-x5cq · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2018-014-1.yaml · Note
• https://github.com/silverstripe/silverstripe-framework/commit/0408048653fafc52e02b4dbc6288e14e634ac613 · Note
• https://github.com/silverstripe/silverstripe-framework · Note
• https://silverstripe.org/download/security-releases/ss-2018-014 · Note