VULNERABILITY INTELLIGENCE

CVE-2019-12437

CVSS score8.8 HIGH

EPSS probability0.74%

CISA KEVNot currently listed

Published2020-02-19

Last modified2026-06-17

Description

In SilverStripe through 4.3.3, the previous fix for SS-2018-007 does not completely mitigate the risk of CSRF in GraphQL mutations,