Assets

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-38724 Nov 23, 00:15 PHP MEDIUM POC PATCH This Month

Silverstripe silverstripe/framework through 4.11.0, silverstripe/assets through 1.11.0, and silverstripe/asset-admin through 1.11.0 allow XSS. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Framework Silverstripe Assets Asset Admin

NVD

CVSS 3.1

5.4

EPSS

0.7%

CVE-2022-29858 Jun 28, 22:15 PHP MEDIUM POC PATCH This Month

Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control that allows protected images to be published by changing an existing image short code on website content. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Authentication Bypass Silverstripe Assets

NVD GitHub

CVSS 3.1

4.3

EPSS

1.2%

CVE-2022-38724 PHP

EPSS 1% CVSS 5.4

MEDIUM POC PATCH This Month

XSS Framework Silverstripe +2

NVD

CVE-2022-29858 PHP

EPSS 1% CVSS 4.3

MEDIUM POC PATCH This Month

Authentication Bypass Silverstripe Assets

NVD GitHub