Reflected SQL Injection Vulnerability in SilverStripe Forms and DataObjects

CVE-2019-5715 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

All versions of SilverStripe 3 prior to 3.6.7 and 3.7.3, and all versions of SilverStripe 4 prior to 4.0.7, 4.1.5, 4.2.4, and 4.3.1 allows Reflected SQL Injection through Form and DataObject.

Learn more about our Cis Benchmark Audit For Microsoft Sql Server.