Known vulnerabilities in SilverStripe GraphQL Server
Vendor:
SilverStripe
Software:
SilverStripe GraphQL Server
Software CPE:
cpe:2.3:a:silverstripe:silverstripe-graphql:*:*:*:*:*:*:*:*
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
6.1.1
5.3.2
6.1.0
6.0.0
5.3.1
5.3.0
5.2.4
5.2.3
5.2.2
5.2.1
4.3.8
5.2.0
5.1.3
4.3.7
5.1.2
4.3.6
5.1.1
4.3.5
5.1.0
4.3.4
5.0.3
4.2.5
4.1.3
3.8.2
5.0.2
4.3.3
5.0.1
4.3.2
4.3.1
5.0.0
4.2.4
4.3.0
4.2.3
4.1.2
4.2.2
4.1.1
4.2.1
4.2.0
4.1.0
4.0.2
4.0.1
3.8.1
3.7.2
4.0.0
3.8.0
3.7.1
3.7.0
3.5.2
3.6.0
3.5.1
3.5.0
3.4.1
3.4.0
3.2.4
3.3.0
3.2.3
3.2.2
3.2.1
3.2.0
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.7
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
0.2.7
0.2.6
0.2.5
0.2.4
0.2.3
0.2.2
0.2.1
0.2.0
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU85696 - Permissions, Privileges, and Access Controls CVE-2023-44401 |
CWE-264 | Low | 4.3.7, 5.1.3 | 23.01.2024 |
SB2024012330 |
||
| #VU82096 - Resource exhaustion CVE-2023-40180 |
CWE-400 | Medium | 3.8.2, 4.1.3, 4.2.5, 4.3.4, 5.0.3 | 17.10.2023 |
SB2023101731 |
||
| #VU57100 - Improper Access Control CVE-2021-28661 |
CWE-284 | Medium | 3.5.2, 3.7.1 | 06.10.2021 |
SB2021100614 |
||
| #VU31781 - Permissions, Privileges, and Access Controls CVE-2020-6165 |
CWE-264 | Medium | 3.2.4, 3.3.0 | 23.07.2020 |
SB2020072305 |
||
| #VU25678 - Cross-Site Request Forgery (CSRF) CVE-2019-12437 |
CWE-352 | Low | 2.0.5, 3.1.0, 3.2.0 | 28.02.2020 |
SB2020022807 |