MediumGHSA-6hh6-59j2-qrxw

Silverstripe History XSS Vulnerability

Published 22 May 2024 · Updated 7 Dec 2024

Affected package

silverstripe/cmsComposer
Affected
>=3.1.0 <3.1.10
Fixed in
3.1.10
Update to the fixed version for your release line, for example:composer require silverstripe/cms:^3.1.10

Details

A cross-site scripting vulnerability has been discovered in the CMS page history tab.

This vulnerability can only be exploited if a user with CMS access has posted malicious or unescaped HTML into any of the text fields on a page, and if the "compare mode" option is selected. The HTML will be embedded into the page unescaped.

This has been resolved by performing the text comparison in a HTML friendly way.

Is GHSA-6hh6-59j2-qrxw in any of your client repos?

Checking one package by hand is fine. Checking it across forty client projects is not. NPMscan reads the lockfiles in every GitHub repo you pick, finds each project with an affected silverstripe/cms, and gives you the command that fixes it.

Scan a project free, no signupOr connect GitHub to scan every repo

References

Advisory data from OSV.dev (opens OSV.dev in a new tab), refreshed daily.