Symbiote

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-27938 Mar 16, 16:15 PHP MEDIUM PATCH This Month

A vulnerability has been identified in the Silverstripe CMS 3 and 4 version of the symbiote/silverstripe-queuedjobs module. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Silverstripe Queued Jobs Symbiote

NVD GitHub

CVSS 3.1

6.1

EPSS

0.8%

CVE-2019-16409 Sep 26, 16:15 PHP MEDIUM PATCH This Month

In the Versioned Files module through 2.0.3 for SilverStripe 3.x, unpublished versions of files are publicly exposed to anyone who can guess their URL. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Silverstripe Versionedfiles Symbiote

NVD GitHub

CVSS 3.1

5.3

EPSS

1.2%

CVE-2021-27938 PHP

EPSS 1% CVSS 6.1

MEDIUM PATCH This Month

XSS Silverstripe Queued Jobs Symbiote

NVD GitHub

CVE-2019-16409 PHP

EPSS 1% CVSS 5.3

MEDIUM PATCH This Month

Information Disclosure Silverstripe Versionedfiles +1

NVD GitHub