CVE-2022-25238

Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that can can be added to website content via XHR by an authenticated CMS user if the cwp-core module is not installed on the sanitise_server_side contig is not set to true in project code.

CVSS v3 5.4 MEDIUM
CVSS v2.0 3.5 LOW

5.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.3 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

3.5^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://docs.silverstripe.org/en/4/changelogs/4.10.1/	Broken Link Release Notes Vendor Advisory
https://forum.silverstripe.org/c/releases	Release Notes Vendor Advisory
https://www.silverstripe.org/blog/tag/release	Release Notes Vendor Advisory
https://www.silverstripe.org/download/security-releases/	Not Applicable Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:silverstripe:framework:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2022-06-28 22:15

Updated : 2024-02-28 19:09

NVD link : CVE-2022-25238

Mitre link : CVE-2022-25238

CVE.ORG link : CVE-2022-25238

JSON object : View

Products Affected

silverstripe

framework

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2022-25238", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}]}, "published": "2022-06-28T22:15:07.957", "references": [{"url": "https://docs.silverstripe.org/en/4/changelogs/4.10.1/", "tags": ["Broken Link", "Release Notes", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://forum.silverstripe.org/c/releases", "tags": ["Release Notes", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.silverstripe.org/blog/tag/release", "tags": ["Release Notes", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.silverstripe.org/download/security-releases/", "tags": ["Not Applicable", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Silverstripe silverstripe/framework through 4.10.0 allows XSS, inside of script tags that can can be added to website content via XHR by an authenticated CMS user if the cwp-core module is not installed on the sanitise_server_side contig is not set to true in project code."}, {"lang": "es", "value": "Silverstripe silverstripe/framework versiones hasta 4.10.0, permite un ataque de tipo XSS, dentro de las etiquetas de script que pueden ser a\u00f1adidas al contenido del sitio web por medio de XHR por un usuario autenticado del CMS si el m\u00f3dulo cwp-core no est\u00e1 instalado en el contig sanitise_server_side no est\u00e1 establecido a true en el c\u00f3digo del proyecto"}], "lastModified": "2022-07-08T00:58:10.877", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:silverstripe:framework:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B8759E36-08DA-4DA4-9AFA-97188B801F91", "versionEndIncluding": "4.10.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}