CVE-2022-29858
- State
- Published
- Severity
- Not scored
- Published
- Jun 28, 2022
- Updated
- Aug 3, 2024
- Reserved
- Apr 27, 2022
Description
Silverstripe silverstripe/assets through 1.10 is vulnerable to improper access control that allows protected images to be published by changing an existing image short code on website content.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://www.silverstripe.org/download/security-releases/
- https://www.silverstripe.org/blog/tag/release
- https://forum.silverstripe.org/c/releases
- https://www.silverstripe.org/download/security-releases/cve-2022-29858
- https://huntr.dev/bounties/90e17d95-9f2f-44eb-9f26-49fa13a41d5a/
- https://github.com/silverstripe/silverstripe-assets/commit/5f6a73b010c01587ffbfb954441f6b7cbb54e767
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.