Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
silverstripeCMS Permissions Privileges and Access Controls Vulnerability - CVE-2011-4961 - Vulnerability Database
silverstripeCMS

silverstripeCMS Permissions Privileges and Access Controls Vulnerability - CVE-2011-4961

Medium
Reference: CVE-2011-4961
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2011-4961
Title: silverstripeCMS Permissions Privileges and Access Controls Vulnerability
Overview:

SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote authenticated users with the EDIT_PERMISSIONS permission to gain administrator privileges via a TreeMultiselectField that includes admin groups when adding a user to the selected groups.