Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 15/04/2020 Updated: 29/04/2020

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

In SilverStripe up to and including 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the default "/Uploads" folder instead. This affects installations which allowed upload folder protection via the optional silverstripe/secureassets module under 3.x. This module is installed and enabled by default on the Common Web Platform (CWP). The vulnerability only affects files uploaded after an upgrade to 4.x.

Vulnerable Product	Search on Vulmon	Subscribe to Product
silverstripe silverstripe

CWE-434 https://www.silverstripe.org/download/security-releases/https://forum.silverstripe.org/c/releases https://www.silverstripe.org/download/security-releases/cve-2020-9280 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-9280

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect