silverstripeCMS Vulnerability - CVE-2019-12204 - Vulnerability Database

silverstripeCMS Vulnerability - CVE-2019-12204

Critical

Reference: CVE-2019-12204

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-12204

Title: silverstripeCMS Vulnerability

Overview:

In SilverStripe through 4.3.3 a missing warning about leaving install.php in a public webroot can lead to unauthenticated admin access.