SilverStripe through 4.3.3 allows a Denial of Service on flush and development URL tools.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
https://www.silverstripe.org/download/security-releases/ | vendor advisory |
https://www.silverstripe.org/blog/tag/release | release notes vendor advisory |
https://forum.silverstripe.org/c/releases | release notes vendor advisory |