CVE-2019-12437

In SilverStripe through 4.3.3, the previous fix for SS-2018-007 does not completely mitigate the risk of CSRF in GraphQL mutations,

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2020-02-19

Last modified

2024-08-04

Weaknesses

CWE-352

Affected products

• Silverstripe (Silverstripe)

References

• https://forum.silverstripe.org/c/releases
• https://www.silverstripe.org/blog/tag/release
• https://www.silverstripe.org/download/security-releases/