Security Advisory

CVE-2011-4961

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-09-17 17:00:00

Last updated 2024-09-16 17:19:06

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote authenticated users with the EDIT_PERMISSIONS permission to gain administrator privileges via a TreeMultiselectField that includes admin groups when adding a user to the selected groups.

← Browse all CVEs View on cve.org ↗