https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T14:38:00.429648+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-4669 EUVD-2026-4669 2026-10-08T14:38:00.505792+00:00 EUVD-2026-4669 https://cve.radiocsirt.org/vuln/fkie_cve-2024-29885 fkie_cve-2024-29885 2026-10-08T14:38:00.505830+00:00

silverstripe/reports is an API for creating backend reports in the Silverstripe Framework. In affected versions reports can be accessed by their direct URL by any user who has access to view the reports admin section, even if the `canView()` method for that report returns `false`. This issue has been addressed in version 5.2.3. All users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-89q6-98xx-4ffw GHSA-89q6-98xx-4ffw — Silverstripe Reports are still accessible even when `canView()` returns false 2026-10-08T14:38:00.505863+00:00

Affected: Packagist: silverstripe/reports

Reports can be accessed by their direct URL by any user who has access to view the reports admin section, even if the `canView()` method for that report returns `false`.

## References - https://www.silverstripe.org/download/security-releases/cve-2024-29885

 https://cve.radiocsirt.org/vuln/gsd-2024-29885 gsd-2024-29885 2026-10-08T14:38:00.505889+00:00 gsd-2024-29885