Homepage
About Snyk

Unrestricted Upload Affecting silverstripe/framework package, versions >=3.6.5, <3.6.6 >=4.0.3, <4.0.4 >=4.1.0, <4.1.1

0.0
critical

Snyk CVSS

    Attack Complexity Low
    Confidentiality High
    Integrity High
    Availability High

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk ID SNYK-PHP-SILVERSTRIPEFRAMEWORK-546516
  • published 5 Feb 2020
  • disclosed 5 Feb 2020
  • credit Insomnia Security
Report a new vulnerability Found a mistake?

Introduced: 5 Feb 2020

CVE NOT AVAILABLE CWE-434 Open this link in a new tab

How to fix?

Upgrade silverstripe/framework to version 3.6.6, 4.0.4, 4.1.1 or higher.

Overview

silverstripe/framework is a PHP framework forming the base for the SilverStripe CMS.

Affected versions of this package are vulnerable to Unrestricted Upload. Some potentially dangerous file types exist in File.allowed_extensions which could allow a malicious CMS user to upload files that then get executed in the security context of the website. We have removed the ability to upload .css, .js, .potm, .dotm, .xltm and .jar files in the default configuration. Since allowed_extensions are synced to webserver configuration (in assets/.htaccess) automatically, this will also deny access to any existing uploads with these extensions.