SilverStripe Multiple Remote Vulnerabilities

Bugtraq ID:	45367
Class:	Unknown
CVE:	CVE-2010-4823 CVE-2010-5078 CVE-2010-4824
Remote:	Yes
Local:	No
Published:	Dec 13 2010 12:00AM
Updated:	Apr 13 2015 09:05PM
Credit:	Tim Suter, Robert Mac Neil and Pavol Ondras
Vulnerable:	SilverStripe SilverStripe 2.4.2 SilverStripe SilverStripe 2.4 -alpha 1 SilverStripe SilverStripe 2.4 SilverStripe SilverStripe 2.3.9 SilverStripe SilverStripe 2.3.6 SilverStripe SilverStripe 2.3.5 SilverStripe SilverStripe 2.3.4 SilverStripe SilverStripe 2.3.1 SilverStripe SilverStripe 2.3 SilverStripe SilverStripe 2.4.3-rc1 SilverStripe SilverStripe 2.3.9-rc1
Not Vulnerable:	SilverStripe SilverStripe 2.4.4-rc1 SilverStripe SilverStripe 2.3.10-rc1.

SilverStripe Multiple Remote Vulnerabilities

Attackers can use a browser to exploit these issues.

SilverStripe Multiple Remote Vulnerabilities

Solution:
The vendor has released an update. Please see the references for more information.

SilverStripe Multiple Remote Vulnerabilities

References:

• SilverStripe 2.4.4-rc1 Release Notes (SilverStripe)
  
• SilverStripe Homepage (SilverStripe )
  
• SilverStripe 2.3.10-rc1 Release Notes (SilverStripe )