GHSA-j696-6m57-mcrv

Silverstripe CMS XSS Vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2017-14498

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	silverstripe/cms	< 3.6.1	3.6.1

Details

As written in the advisory (Markdown source, shown as plain text).

SilverStripe CMS before 3.6.1 has XSS via an SVG document that is mishandled by (1) the Insert Media option in the content editor or (2) an admin/assets/add pathname, as demonstrated by the admin/pages/edit/EditorToolbar/MediaForm/field/AssetUploadField/upload URI, aka issue SS-2017-017.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2017-14498 advisory
https://github.com/silverstripe/silverstripe-framework/commit/25b77a2ff8deabe8e8894002b9a5647eaec27b0a web
https://github.com/silverstripe/silverstripe-installer/commit/c25478bef75cc5482852e80a1fa6f1f0e6460e39 web
https://docs.silverstripe.org/en/3/changelogs/3.6.1 web
http://lists.openwall.net/full-disclosure/2017/09/14/2 web