CVE-2019-19326: SilverStripe Web Cache Poisoning through HTTPRequestBuilder
Summary
CVE-2019-19326: SilverStripe Web Cache Poisoning through HTTPRequestBuilder. Affects silverstripe/framework across 3 version ranges.
>= 3.0.0, < 3.7.5
>= 4.0.0, < 4.4.7
>= 4.5.0, < 4.5.4
Fixed in 3.7.5, 4.4.7 or 4.5.4, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
SilverStripe is an open-source content management system (CMS) framework written in PHP. It provides a flexible and extensible platform for building websites and web applications. The SilverStripe framework, specifically versions 3.0.0 to 3.7.5, 4.0.0 to 4.4.7, and 4.5.0 to 4.5.4, is affected by a web cache poisoning vulnerability through the HTTPRequestBuilder.
Vulnerability Detail
The vulnerability allows an attacker to poison the web cache by manipulating the HTTPRequestBuilder. By exploiting this vulnerability, an attacker can potentially trick the web cache into serving malicious content to unsuspecting users. This can lead to various security risks, including the execution of arbitrary code, unauthorized access to sensitive information, and potential compromise of user sessions.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 3.0.0, < 3.7.53.7.5composer require silverstripe/framework:3.7.5 -
>= 4.0.0, < 4.4.74.4.7composer require silverstripe/framework:4.4.7 -
>= 4.5.0, < 4.5.44.5.4composer require silverstripe/framework:4.5.4
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to apply the recommended fix by upgrading to the latest version of the SilverStripe framework.
Conclusion
The SilverStripe framework versions 3.0.0 to 3.7.5, 4.0.0 to 4.4.7, and 4.5.0 to 4.5.4 are vulnerable to web cache poisoning through the HTTPRequestBuilder. It is crucial to upgrade to the latest version of the framework to mitigate the risks associated with this vulnerability. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for silverstripe/framework →
FAQ
SilverStripe is an open-source content management system (CMS) framework written in PHP. It provides a flexible and extensible platform for building websites and web applications.
Web cache poisoning is a technique where an attacker manipulates the content of a web cache to serve malicious or unauthorized content to users.
The risks include the execution of arbitrary code, unauthorized access to sensitive information, and potential compromise of user sessions.
To fix this vulnerability, it is recommended to upgrade to the latest version of the SilverStripe framework.
There is no known workaround for this vulnerability. Upgrading to the latest version of the SilverStripe framework is the recommended solution.
References
Related vulnerabilities
Recent vulnerabilities recorded for silverstripe/framework.
