MEDIUM
GHSA-gv6c-59h4-9pmg
Silverstripe CMS Arbitrary Code Execution
Quick fix
GHSA-gv6c-59h4-9pmg — silverstripe/cms: upgrade to the fixed version with the command below.
composer require silverstripe/cms:^2.4.6Details
`code/sitefeatures/PageCommentInterface.php` in SilverStripe 2.4.x before 2.4.6 might allow remote attackers to execute arbitrary code via a crafted cookie in a user comment submission, which is not properly handled when it is deserialized.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/silverstripe/cms
Introduced in:
2.4.0Fixed in: 2.4.6Fix
composer require silverstripe/cms:^2.4.6References
- https://nvd.nist.gov/vuln/detail/CVE-2011-4962[ADVISORY]
- https://github.com/silverstripe/silverstripe-cms/commit/d15e8509b01ff2dbbe3028a055021a29b1065b22[WEB]
- https://github.com/silverstripe/silverstripe-cms[PACKAGE]
- https://web.archive.org/web/20120621234353/http://doc.silverstripe.org/framework/en/trunk/changelogs/2.4.6[WEB]
- http://www.openwall.com/lists/oss-security/2012/04/30/1[WEB]
- http://www.openwall.com/lists/oss-security/2012/04/30/3[WEB]