Vendor/product archive

silverstripe / assets CVEs

Beta · best-effort

2 CVEs tagged to silverstripe / assets — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to silverstripe vendor archive

CVE-2022-38724

Published Nov 23, 2022

Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0, and silverstripe/asset-admin through 1.11.0 allow XSS.

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-29858

Published Jun 28, 2022

Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control that allows protected images to be published by changing an existing image short code on web…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1