Symbiote

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 3
    Known Exploited: 0
    0
    Critical Level Threats
    0
    High Level Threats
    3
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2017-20164

    Symbiote Seed Login SecurityLoginExtension.php onBeforeSecurityLogin redirect

    Last Modified: Apr 08, 2025
    Published: Jan 07, 2023

    CVE-2021-27938

    A vulnerability has been identified in the Silverstripe CMS 3 and 4 version of the symbiote/silverstripe-queuedjobs module. A Cross Site Scripting vulnerability allows an attacker to inject an arbitrary payload in the CreateQueuedJobTask dev task via a specially crafted URL.

    Last Modified: Nov 21, 2024
    Published: Mar 16, 2021

    CVE-2019-16409

    In the Versioned Files module through 2.0.3 for SilverStripe 3.x, unpublished versions of files are publicly exposed to anyone who can guess their URL. This guess could be highly informed by a basic understanding of the symbiote/silverstripe-versionedfiles source code. (Users who upgrade from SilverStripe 3.x to 4.x and had Versioned Files installed have no further need for this module, because the 4.x release has built-in versioning. However, nothing in the upgrade process automates the destruction of these insecure artefacts, nor alerts the user to the criticality of destruction.)

    Last Modified: Nov 21, 2024
    Published: Sep 26, 2019
    Items Per Page
    Symbiote Vulnerabilities & Security CVEs | CVE-DB