Vulnerabilities in Silverstripe CMS

Posted by MustLive on May 08

Hello list!

I want to warn you about Brute Force, Insufficient Anti-automation and Abuse
of Functionality vulnerabilities in Silverstripe CMS.

————————-
Affected products:
————————-

Vulnerable are Silverstripe CMS 2.4.5 and previous versions.

———-
Details:
———-

Brute Force (WASC-11):

http://site/Security/login

Insufficient Anti-automation (WASC-21):

http://site/contact-us/…

Source: Vulnerabilities in Silverstripe CMS