UpHeron
All vulnerabilities

Servers and applications

CVE-2023-32302

Members with no password can be created and bypass custom login forms

Severity
Low
Published
31 Jul 2023
Last changed
31 Jul 2023
Added to UpHeron
3 Nov 2026
Fixed in
4.13.14, 5.0.13
Also known as
GHSA-36xx-7vf6-7mv3
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Silverstripe CMSServers and applications · github:silverstripe/silverstripe-framework
  • Every version before 4.13.14
  • From 5.0.0 before 5.0.13

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-32302
  • GitHub Advisory Database https://github.com/advisories/GHSA-36xx-7vf6-7mv3
  • github.com https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-36xx-7vf6-7mv3