Security Advisory

CVE-2022-38462

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-11-22 00:00:00

Last updated 2025-04-29 04:37:07

Assigner mitre

State PUBLISHED

Silverstripe silverstripe/framework through 4.11 is vulnerable to XSS by carefully crafting a return URL on a /dev/build or /Security/login request.