-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| silverstripe/recipe-cms | composer | >= 4.5.0, < 4.5.3 | 4.5.3 |
| silverstripe/graphql | composer | >= 3.2.0, < 3.2.4 | 3.2.4 |
PHPPHPMiggo AIRoot Cause AnalysisThe vulnerability stems from improper ordering of permission checks relative to query limitations. The changelogs explicitly mention moving 'query resolution after the DataListQuery has been altered' and ensuring 'canView() check is run on items.' This indicates that DataListQuery::resolve() executed permission checks on the full dataset before applying pagination/limits, leaving residual unauthorized records in the truncated result. The CanViewPermissionChecker::checkItem() method was likely invoked at the wrong stage in this flow. The patch corrected this by reordering the steps to apply permissions after query constraints.
Ongoing coverage of React2Shell