GHSA-34q6-xqxh-gq39

Suggest an improvement
Source
https://github.com/advisories/GHSA-34q6-xqxh-gq39
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-34q6-xqxh-gq39/GHSA-34q6-xqxh-gq39.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-34q6-xqxh-gq39
Published
2024-05-23T15:21:44Z
Modified
2024-11-28T05:39:53Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
Silverstripe XSS In rewritten hash links
Details

A high level XSS vulnerability has been discovered in the SilverStripe framework which causes links containing hash anchors (E.g. href="#anchor") to be rewritten in an unsafe way.

The rewriteHashlinks option on SSViewer will rewrite these to contain the current url, although without adequate escaping, meaning that HTML could be injected via injecting unsafe values to any page via the querystring.

Due to the nature of this issue it is likely that a large number of SilverStripe sites are affected.

Database specific 
{
    "cwe_ids":  [
        "CWE-79"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2024-05-23T15:21:44Z",
    "nvd_published_at":  null,
    "severity":  "MODERATE"
}
References

Affected packages

Packagist / silverstripe/framework

Package

Name
silverstripe/framework
Purl
pkg:composer/silverstripe/framework

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.0.13

Affected versions

2.*
2.4.9
2.4.10
2.4.11
2.4.12
2.4.13
2.5.0
3.*
3.0.2.1
3.0.3-rc1
3.0.3-rc2
3.0.3
3.0.4
3.0.5
3.0.6-rc1
3.0.6-rc2
3.0.6
3.0.7-rc1
3.0.7
3.0.8
3.0.9-rc1
3.0.9
3.0.10-rc1
3.0.10
3.0.11-rc1
3.0.11
3.0.12

Database specific

last_known_affected_version_range 
"<= 3.0.12"
source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-34q6-xqxh-gq39/GHSA-34q6-xqxh-gq39.json"

Packagist / silverstripe/framework

Package

Name
silverstripe/framework
Purl
pkg:composer/silverstripe/framework

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.1.0
Fixed
3.1.12

Affected versions

3.*
3.1.0
3.1.1
3.1.2-rc1
3.1.2
3.1.3-rc1
3.1.3-rc2
3.1.3
3.1.4-rc1
3.1.4
3.1.5-rc1
3.1.5
3.1.6-rc1
3.1.6-rc2
3.1.6-rc3
3.1.6
3.1.7-rc1
3.1.7
3.1.8
3.1.9-rc1
3.1.9
3.1.10-rc1
3.1.10-rc2
3.1.10
3.1.11-rc1
3.1.11

Database specific

last_known_affected_version_range 
"<= 3.1.11"
source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-34q6-xqxh-gq39/GHSA-34q6-xqxh-gq39.json"