Description
In SilverStripe assets 4.0, there is broken access control on files.
Remediation
References
Related Vulnerabilities
WordPress Plugin Responsive Gallery Grid Cross-Site Scripting (2.3.8)
WordPress Plugin Shantz WordPress QOTD Cross-Site Request Forgery (1.2.2)
WordPress Plugin Social Media Widget Serving Spam (4.0)
Oracle JRE CVE-2020-2601 Vulnerability (CVE-2020-2601)
PostgreSQL Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2016-5424)