PHP script execution vulnerability in silverstripe/framework
Summary
GHSA-f43j-8hq4-2xj9: silverstripe/framework uploaded PHP script execution in assets. Affects silverstripe/framework across 2 version ranges.
>= 4.0.0-rc1, < 4.0.4
>= 4.1.0-rc1, < 4.1.1
Fixed in 4.0.4 or 4.1.1, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
silverstripe/framework is a PHP framework used for building websites and web applications. It provides a range of features and functionalities to developers, including content management, templating, and database management. However, a vulnerability has been identified in the framework that allows for the execution of PHP scripts uploaded to the assets directory.
Vulnerability Detail
The vulnerability arises from a weakness in the .htaccess rules that are supposed to prevent requests to uploaded PHP scripts. This weakness allows specially crafted URLs to successfully execute PHP scripts that have made their way into the assets directory. It is important to note that there are protections in place within the CMS to disallow the upload of PHP scripts, mitigating the direct impact of this vulnerability. Additionally, sites hosted on the New Zealand Common Web Platform or SilverStripe Platform have additional configurations that prevent PHP script execution in the assets folder, even if malicious actors manage to upload PHP scripts.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 4.0.0-rc1, < 4.0.44.0.4composer require silverstripe/framework:4.0.4 -
>= 4.1.0-rc1, < 4.1.14.1.1composer require silverstripe/framework:4.1.1
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The PHP script execution vulnerability in silverstripe/framework allows for the execution of PHP scripts uploaded to the assets directory. However, the impact of this vulnerability is mitigated by protections in the CMS and additional configurations on certain hosting platforms. It is crucial to update the silverstripe/framework package to the fixed versions mentioned to ensure the vulnerability is patched. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for silverstripe/framework →
FAQ
silverstripe/framework is a PHP framework used for building websites and web applications. It provides developers with a range of features and functionalities, including content management, templating, and database management.
The vulnerability allows for the execution of PHP scripts that have been uploaded to the assets directory. However, there are protections in place within the CMS to disallow the upload of PHP scripts, mitigating the direct impact of this vulnerability. Additionally, sites hosted on the New Zealand Common Web Platform or SilverStripe Platform have additional configurations that prevent PHP script execution in the assets folder.
To fix this vulnerability, it is recommended to update the silverstripe/framework package to the fixed versions mentioned in the 'how_to_fix' section.
No specific workarounds have been mentioned for this vulnerability.
You can find more information about this vulnerability in the provided source link: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-f43j-8hq4-2xj9/GHSA-f43j-8hq4-2xj9.json
References
Related vulnerabilities
Recent vulnerabilities recorded for silverstripe/framework.
