Description

SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote authenticated users with the EDIT_PERMISSIONS permission to gain administrator privileges via a TreeMultiselectField that includes admin groups when adding a user to the selected groups.

Remediation

References

CVE-2011-4961

Related Vulnerabilities

WordPress Plugin Network Publisher 'networkpub_key' Parameter Cross-Site Scripting (5.0.1)

WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2022-23302)

WordPress Plugin DB Toolkit 'uploadify.php' Arbitrary File Upload (0.1.10)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-33336)

XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-41927)

Severity

Medium

Classification

CVE-2011-4961 CWE-264

Tags

Missing Update Known Vulnerabilities