UpHeron
All vulnerabilities

Servers and applications

CVE-2019-5715

All versions of SilverStripe 3 prior to 3.6.7 and 3.7.3, and all versions of SilverStripe 4 prior to 4.0.7, 4.1.5, 4.2.4, and 4.3.1 allows Reflected SQL Injection through Form and DataObject.

Severity
Critical 9.8
Published
11 Apr 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
3.6.7, 3.7.3, 4.0.7, 4.1.5, 4.2.4
Exploit chance
1.6% in the next 30 daysHigher than 75% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Silverstripe CMSServers and applications · cpe:a:silverstripe:silverstripe
  • From 3.0.0 before 3.6.7
  • From 3.7.0 before 3.7.3
  • From 4.0.0 before 4.0.7
  • From 4.1.0 before 4.1.5
  • From 4.2.0 before 4.2.4
  • Version 4.3.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-5715
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-5715