PT-2024-40536 · Packagist · Silverstripe/Framework

Published 2024-05-27 · Updated 2024-05-27

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned.

Description: A security issue allows a member with the EDIT PERMISSIONS permission and access to the "Security" section to escalate their privileges to ADMIN level by re-assigning themselves or another member. This is possible due to the construction of CMS Fields for the member using DirectGroups instead of the Groups relation, which bypasses the security logic intended to prevent privilege escalation.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-268

Related Identifiers

GHSA-XPFF-C35G-J3CR

Affected Products

Silverstripe/Framework

References · 6

• https://osv.dev/vulnerability/GHSA-xpff-c35g-j3cr · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2018-001-1.yaml · Note
• https://github.com/silverstripe/silverstripe-framework/commit/e409d6f673c49846086b23677aecdc3fde5fc4d5 · Note
• https://github.com/silverstripe/silverstripe-framework/commit/577138882163e4b8782ea043487944d30d88e753 · Note
• https://github.com/silverstripe/silverstripe-framework · Note
• https://silverstripe.org/download/security-releases/ss-2018-001 · Note