exploitDog

CVE-2019-12204

Опубликовано: 25 сент. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

In SilverStripe through 4.3.3, a missing warning about leaving install.php in a public webroot can lead to unauthenticated admin access.

Ссылки

https://forum.silverstripe.org/c/releases
Release Notes
Vendor Advisory
https://www.silverstripe.org/download/security-releases/
Vendor Advisory
https://www.silverstripe.org/download/security-releases/CVE-2019-12204
Vendor Advisory
https://forum.silverstripe.org/c/releases
Release Notes
Vendor Advisory
https://www.silverstripe.org/download/security-releases/
Vendor Advisory
https://www.silverstripe.org/download/security-releases/CVE-2019-12204
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:silverstripe:silverstripe:*:*:*:*:*:*:*:*

Версия от 4.1.0 (включая) до 4.3.3 (включая)

EPSS

Процентиль: 74%

0.00832

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-cg8j-8w52-735v

CVSS3: 9.8

github

около 6 лет назад

Missing warning can lead to unauthenticated admin access in SilverStripe

EPSS

Процентиль: 74%

0.00832

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo