CVE-2022-38462
- Source
- https://cve.org/CVERecord?id=CVE-2022-38462
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-38462.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-38462
- Aliases
- Published
- 2022-11-22T13:15:12.847Z
- Modified
- 2026-04-10T04:50:07.029610Z
- Severity
-
- 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Silverstripe silverstripe/framework through 4.11 is vulnerable to XSS by carefully crafting a return URL on a /dev/build or /Security/login request.
- References
Affected packages
Git / github.com/silverstripe/silverstripe-framework
Affected ranges
- Type
- GIT
- Repo
- https://github.com/silverstripe/silverstripe-framework
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedIntroducedLast affected
- Database specific
{ "versions": [ { "introduced": "0" }, { "fixed": "4.11.13" }, { "introduced": "3.0.0" }, { "last_affected": "3.7.7" } ] }
Affected versions
2.*
2.2.0-rc1
2.2.2-rc1
2.3.0-rc1
3.*
3.0.0-alpha1
3.0.0-alpha2
3.0.0-beta1
3.0.0-beta2
3.0.0-beta3
3.0.0-rc1
3.7.0
3.7.1-rc1
3.7.2
3.7.3
3.7.5
3.7.6
3.7.7
4.*
4.0.0-alpha1
4.0.0-alpha2
4.0.0-alpha3
4.0.0-alpha4
4.0.0-alpha6
4.0.0-alpha7
4.0.0-beta1
4.0.0-beta2
4.0.0-beta3
4.1.0-rc1
4.11.0-beta1
4.11.0-beta2
4.11.0-beta3
4.11.1
4.11.10
4.11.11
4.11.12
4.11.2
4.11.3
4.11.4
4.11.5
4.11.6
4.11.7
4.11.8
4.11.9
4.6.0-beta1
4.7.0-beta1
4.8.0-beta1
4.9.0-alpha1
4.9.0-beta1