Description
In SilverStripe through 4.3.3, there is access escalation for CMS users with limited access through permission cache pollution.
Remediation
References
Related Vulnerabilities
Oracle Application Server CVE-2006-3707 Vulnerability (CVE-2006-3707)
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9518)
WordPress Plugin WordPress Landing Pages Unspecified Vulnerability (2.2.6)
ColdFusion CFC Deserialization RCE (CVE-2023-26359/CVE-2023-26360)
OpenSSL Resource Management Errors Vulnerability (CVE-2006-2937)