VULNERABILITY INTELLIGENCE

CVE-2023-48714

CVSS score4.3 MEDIUM

EPSS probability0.36%

CISA KEVNot currently listed

Published2024-01-23

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Silverstripe Framework is the framework that forms the base of the Silverstripe content management system. Prior to versions 4.13.39 and 5.1.11, if a user should not be able to see a record, but that record can be added to a `GridField` using the `GridFieldAddExistingAutocompleter` component, the record's title can be accessed by that user. Versions 4.13.39 and 5.1.11 contain a fix for this issue.

Weakness classification

security-advisories@github.com: CWE-200
nvd@nist.gov: CWE-732

Primary references

security-advisories@github.com — Vendor Advisory
security-advisories@github.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory