Open Redirect Vulnerability in silverstripe/framework
Summary
GHSA-m5q3-mvcr-gc5m: silverstripe/framework BackURL validation bypass with malformed URLs. Affects silverstripe/framework across 2 version ranges.
>= 4.0.0-rc1, < 4.0.4
>= 4.1.0-rc1, < 4.1.1
Fixed in 4.0.4 or 4.1.1, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
silverstripe/framework is a PHP framework used for building websites and web applications. It provides a range of features and functionalities to developers, including URL routing and redirection. However, a vulnerability has been discovered in the framework that allows for the bypassing of offsite redirection protection on BackURL parameters. This can lead to users unknowingly entering sensitive data on malicious websites instead of the intended destination.
Vulnerability Detail
The vulnerability in silverstripe/framework arises from a flaw in the validation of BackURL parameters. By crafting a carefully constructed malformed URL, an attacker can bypass the offsite redirection protection. This can have serious consequences as users may be tricked into entering sensitive information, such as login credentials or personal data, on malicious websites. The vulnerability has a CVSS score of 7.5, indicating a high severity level.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
>= 4.0.0-rc1, < 4.0.44.0.4composer require silverstripe/framework:4.0.4 -
>= 4.1.0-rc1, < 4.1.14.1.1composer require silverstripe/framework:4.1.1
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by updating the silverstripe/framework package to the patched versions.
Conclusion
The Open Redirect vulnerability in silverstripe/framework can lead to users unknowingly entering sensitive data on malicious websites. It is crucial to update the package to the patched versions to mitigate this risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for silverstripe/framework →
FAQ
silverstripe/framework is a PHP framework used for building websites and web applications. It provides developers with a range of features and functionalities to simplify the development process.
The vulnerability allows for the bypassing of offsite redirection protection on BackURL parameters. This means that users may unknowingly enter sensitive data on malicious websites instead of the intended destination, putting their information at risk.
The vulnerability has a CVSS score of 7.5, indicating a high severity level.
No, there are no known workarounds for this vulnerability. It is crucial to apply the recommended fix by updating the silverstripe/framework package to the patched versions.
To fix this vulnerability, you should update the silverstripe/framework package to version 4.0.4 or higher for versions 4.0.x, and to version 4.1.1 or higher for versions 4.1.x. Make sure to update your dependencies and deploy the updated package to your production environment.
References
Related vulnerabilities
Recent vulnerabilities recorded for silverstripe/framework.
