CVE-2023-48714

Summary

CVE-2023-48714 is a vulnerability affecting the Silverstripe Framework, the foundation of the Silverstripe content management system. Prior to versions 4.13.39 and 5.1.11, unauthorized users were able to access record titles of hidden records through the `GridFieldAddExistingAutocompleter` component. This issue could potentially lead to unintended information disclosure. Versions 4.13.39 and 5.1.11 have since been released to address this vulnerability, mitigating the risk for affected users.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.