-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stemmed from improper handling of the BackURL parameter in authentication flows. The pre-patch code in both MemberLoginForm and ChangePasswordForm directly used user-supplied BackURL values after basic domain validation (Director::is_site_url), but failed to properly normalize URLs. This allowed attackers to craft URLs like /\attacker.com that would pass domain checks but resolve to external sites when processed. The commit fixes show the addition of Director::absoluteURL() calls to normalize URLs, indicating the original functions lacked proper URL canonicalization. The vulnerability matches CWE-601 (Open Redirect) through improper validation of redirect targets in authentication context.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| silverstripe/framework | composer | <= 3.0.13 | 3.0.14 |
| silverstripe/framework | composer | >= 3.1.0, <= 3.1.13-rc1 | 3.1.13 |