Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
Miggo AIRoot Cause AnalysisThe vulnerability exists in the ListViewForm function within the CMSMain.php controller. The patch clearly shows that the logic for generating breadcrumbs was removed from this function and replaced with a call to a new, more secure function, getListViewBreadcrumbs. The removed code snippet demonstrates that page titles, which can be controlled by a user, were being directly concatenated into an HTML string without any sanitization or escaping. This is a classic stored XSS vulnerability. The new getListViewBreadcrumbs function uses Convert::raw2xml to properly escape the page titles, thus mitigating the vulnerability. The vulnerable function is therefore SilverStripe\CMS\Controllers\CMSMain::ListViewForm as it was the function that contained the vulnerable code prior to the patch.
SilverStripe\CMS\Controllers\CMSMain::ListViewFormcode/Controllers/CMSMain.php
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| silverstripe/cms | composer | < 6.2.1 | 6.2.1 |