GHSA-mg2g-8pwj-r2j2

    Dashboard / Vulnerabilities / GHSA-mg2g-8pwj-r2j2

    GHSA-mg2g-8pwj-r2j2

    Published: 10 Jun 2021Last Modified: 17 Feb 2024

    Summary: Authentication bypass in SilverStripe GraphQL

    Details: The GraphQL module accepts basic-auth as an authentication method by default. This can be used to bypass MFA authentication if the silverstripe/mfa module is installed, which is now a commonly installed module. A users password is still required though. Basic-auth has been removed as a default authentication method. If desired, it can be re-enabled by adding it to the authenticators key of a schema, or on SilverStripe\Graphql\Auth\Handler

    References: https://nvd.nist.gov/vuln/detail/CVE-2020-26136, https://forum.silverstripe.org/c/releases, https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/graphql/CVE-2020-26136.yaml, https://www.silverstripe.org/blog/tag/release, https://www.silverstripe.org/download/security-releases, https://www.silverstripe.org/download/security-releases/cve-2020-26136

    Affected packages

    Package

    Name: silverstripe/graphql

    Purl: pkg:composer/silverstripe/graphql

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 3.0.0
    Fixed -3.5.0

    Affected versions

    3.0.0
    3.0.1
    3.0.2
    3.0.3
    3.0.4

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GHSA-mg2g-8pwj-r2j2 | CVE-DB