https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 12:10:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-231397 EUVD-2026-231397 https://cve.radiocsirt.org/vuln/euvd-2026-231397 https://cve.radiocsirt.org/vuln/fkie_cve-2022-42949 <p>Silverstripe silverstripe/subsites through 2.6.0 has Insecure Permissions.</p> <p>Silverstripe silverstripe/subsites through 2.6.0 has Insecure Permissions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-42949 https://cve.radiocsirt.org/vuln/ghsa-cx45-565q-6qx8 <p><strong>Affected:</strong> Packagist: silverstripe/subsites</p> <p>The subsites module can weaken edit restrictions on some files and allow a malicious user to edit files they do not have edit rights to.</p> <p>This only affects projects with the subsites module installed. Regression testing should focus on custom file logic.</p> <p>Be advised that this is not a case of a user being able to edit a file in subsites they do not have access to. As a reminder, all separation of content achieved with the subsites module should be viewed as cosmetic and not appropriate for security-critical applications.</p> <p><strong>Affected:</strong> Packagist: silverstripe/subsites</p> <p>The subsites module can weaken edit restrictions on some files and allow a malicious user to edit files they do not have edit rights to.</p> <p>This only affects projects with the subsites module installed. Regression testing should focus on custom file logic.</p> <p>Be advised that this is not a case of a user being able to edit a file in subsites they do not have access to. As a reminder, all separation of content achieved with the subsites module should be viewed as cosmetic and not appropriate for security-critical applications.</p> https://cve.radiocsirt.org/vuln/ghsa-cx45-565q-6qx8 https://cve.radiocsirt.org/vuln/gsd-2022-42949 gsd-2022-42949 https://cve.radiocsirt.org/vuln/gsd-2022-42949