CVE-2019-12245 | BDVDB-2026-123151 Detail

Description#

SilverStripe through 4.3.3 has incorrect access control for protected files uploaded via Upload::loadIntoFile(). An attacker may be able to guess a filename in silverstripe/assets via the AssetControlExtension.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.silverstripe.org/download/security-releases/
https://forum.silverstripe.org/c/releases
https://www.silverstripe.org/download/security-releases/CVE-2019-12245

Exploit#

No public exploit known

History#

Version 12019-09-25Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.