PT-2024-40520 · Unknown · Developmentadmin

Published 2024-05-23 · Updated 2024-05-23

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions DevelopmentAdmin (affected versions not specified)

Description The issue concerns a missing permission check in the buildDefaults method on DevelopmentAdmin. Specifically, when accessing the /dev/build/defaults endpoint, the action is performed without a login check, unlike accessing /dev/build, which prompts for a login first. This lack of protection could allow unauthorized modification of database state through the requireDefaultRecords() method on each DataObject class. Additionally, it may provide attackers with insights into the database structure and used modules by listing all modified tables.

Recommendations As a temporary workaround, consider restricting access to the /dev/build/defaults endpoint until a proper permission check is implemented. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-425

Related Identifiers

GHSA-X5W2-WCR8-9Q45

Affected Products

Developmentadmin

References · 7

• https://osv.dev/vulnerability/GHSA-x5w2-wcr8-9q45 · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2015-028-1.yaml · Note
• https://github.com/silverstripe/silverstripe-framework/commit/15d4db3b4a7dbc9a7e089f9329a396f8408ed7d9 · Note
• https://github.com/silverstripe/silverstripe-framework/commit/3398f670d881447f8777b567f1ead7c0d8d253f5 · Note
• https://github.com/silverstripe/silverstripe-framework/commit/5d2fc0d7cac4ce686f7ae05c1a7b1ad8c01711a8 · Note
• https://github.com/silverstripe/silverstripe-framework · Note
• https://silverstripe.org/download/security-releases/ss-2015-028 · Note