CVE-2023-22729CWE-601

Silverstripe Framework has open redirect vulnerability on CMSSecurity relogin screen

Medium · published April 26, 2023

CVSS v3.1
5.4
EPSS
0%
Percentile
35.1
In the wild
Unconfirmed
What it is

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, an attacker can display a link to a third party website on a login screen by convincing a legitimate content author to follow a specially crafted link. Users should upgrade to Silverstripe Framework 4.12.15 or above to address the issue.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00419 · 35.1th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2023-04-26T14:00Z
EPSS history
Timeline
  • 26 APR 14:00Z
    Silverstripe Framework has open redirect vulnerability on CMSSecurity relogin screen
    cvelistv5