-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from insufficient MIME type validation in file upload handling. Silverstripe CMS's core Upload_Validator class relies on extension-based validation by default. When the optional mimevalidator module is absent, the validate() method in Upload_Validator does not enforce MIME type checks, allowing files with dangerous content to be uploaded if their extension is permitted. This matches the CWE-434 description and the advisory's emphasis on MIME validation being optional. The function's role in the upload validation pipeline and the module's mitigation strategy confirm its relevance.
PHPPHPOngoing coverage of React2Shell
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| silverstripe/cms | composer | <= 4.5.0 |