Silverstripe XSS in Director::force_redirect()
Published 23 May 2024 · Updated 28 Nov 2024
Affected package
- Affected
- >=3.1.0 <3.1.12
- Fixed in
- 3.1.12
composer require silverstripe/framework:^3.1.12Details
A low level XSS vulnerability has been found in the Framework affecting http redirection via the Director::force_redirect method.
Attempts to redirect to a url may generate HTML which is not safely escaped, and may pose a risk of XSS in some environments.
This vulnerability is marked low as it is difficult to exploit, as any injected HTML will only be returned from the server if the Location HTTP header is also sent, meaning that any user browsing the site would not be exposed to the body of the response before their browser redirects them.
Is GHSA-jqp8-v74p-g8px in any of your client repos?
Checking one package by hand is fine. Checking it across forty client projects is not. NPMscan reads the lockfiles in every GitHub repo you pick, finds each project with an affected silverstripe/framework, and gives you the command that fixes it.
References
- Linkgithub.com/silverstripe/silverstripe-framework/commit/ee9bddb808df6d27db4d56bb5d522dcfe6788715
- Linkgithub.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2015-010-1.yaml
- Packagegithub.com/silverstripe/silverstripe-framework
- Linkwww.silverstripe.org/software/download/security-releases/ss-2015-010-xss-in-directorforce-redirect
Advisory data from OSV.dev (opens OSV.dev in a new tab), refreshed daily.