Description

In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution.

Remediation

References

CVE-2019-12617

Related Vulnerabilities

phpMyFAQ Other Vulnerability (CVE-2005-3734)

MySQL CVE-2023-22058 Vulnerability (CVE-2023-22058)

WordPress Plugin WP Maintenance Mode Cross-Site Scripting (2.2.3)

Joomla Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Vulnerability (CVE-2019-11358)

OpenSSL Improper Locking Vulnerability (CVE-2022-3996)

Severity

Low

Classification

CVE-2019-12617 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities