How many silverstripe silverstripe-assets CVEs are in CISA KEV?

None of silverstripe silverstripe-assets's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of silverstripe silverstripe-assets are affected?

28 distinct silverstripe silverstripe-assets versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in silverstripe silverstripe-assets CVEs?

silverstripe silverstripe-assets's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication), CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-863 (Incorrect Authorization).

What is the average severity of silverstripe silverstripe-assets CVEs?

The average CVSS base score across silverstripe silverstripe-assets's scored CVEs is 5.6.

RadicalNotion.AI

Log in Create an account

silverstripe

4 CVEs

silverstripe silverstripe-assets Vulnerabilities

Name: silverstripe silverstripe-assets vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for silverstripe-assets by silverstripe.

4

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

5.6

Avg CVSS

2020–2026

Last updated April 16, 2026

Overview

silverstripe silverstripe-assets has 4 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 5.6.

Severity and exploitation

How the CVSS severity of silverstripe silverstripe-assets's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of silverstripe silverstripe-assets's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of silverstripe silverstripe-assets's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every silverstripe silverstripe-assets version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

1.0.0-alpha62 CVEs
1.0.0-alpha72 CVEs
1.0.0-beta12 CVEs
1.0.0-beta22 CVEs
1.0.0-beta32 CVEs
1.1.0-rc12 CVEs
1.10.02 CVEs
1.10.0-beta12 CVEs
1.10.0-rc12 CVEs
1.4.02 CVEs
1.4.0-rc12 CVEs
1.6.0-beta12 CVEs
1.7.02 CVEs
1.7.0-beta12 CVEs
1.7.0-rc12 CVEs
1.8.02 CVEs
1.8.0-beta12 CVEs
1.8.0-rc12 CVEs
1.9.0-alpha12 CVEs
1.9.0-beta12 CVEs
< 2.4.51 CVE
>= 3.0.0-rc1, < 3.1.31 CVE
1.11.01 CVE
1.11.0-beta11 CVE
1.11.0-rc11 CVE

Fixed in

5b549af111250a0d7d4f2b8207c11056b1a1b6b91 CVE
5f6a73b010c01587ffbfb954441f6b7cbb54e7671 CVE
74a96e8c78186a1fb26bddabe31829dee82e29b11 CVE

Find a version

4 CVEs

Sort

Silverstripe Assets Module has a DBFile::getURL() permission bypass
CVE-2026-24749
Patch
CWE-863
Medium · CVSS 5.3
EPSS 0.4% (32th pct)2026-04-16
Silverstripe XSS in shortcodes
CVE-2022-38724
Public exploit
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.7% (52th pct)2022-11-22
Unpublished, protected files can be published via shortcode
CVE-2022-29858
Public exploit
Patch
CWE-287
Medium · CVSS 4.3
EPSS 1.2% (69th pct)2022-06-28
SilverStripe Folders migrated from 3.x may be unsafe to upload to
CVE-2020-9280
Patch
CWE-434
High · CVSS 7.5
EPSS 1.7% (77th pct)2020-04-15

Common weakness types

The CWE weakness categories most often found in silverstripe silverstripe-assets CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many silverstripe silverstripe-assets CVEs were published each year.

2020

1

2022

2

2026

1

Other silverstripe products

Browse vulnerabilities for other products by silverstripe.

silverstripe64 CVEs silverstripe/framework38 CVEs silverstripe-framework31 CVEs silverstripe-cms27 CVEs framework15 CVEs silverstripe/cms13 CVEs silverstripe/graphql7 CVEs sapphire6 CVEs

All silverstripe vulnerabilities

Frequently asked questions

Common questions about silverstripe silverstripe-assets vulnerabilities.

How many CVEs does silverstripe silverstripe-assets have?: silverstripe silverstripe-assets has 4 published CVE records since 2020.
How many silverstripe silverstripe-assets CVEs are in CISA KEV?: None of silverstripe silverstripe-assets's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for silverstripe silverstripe-assets vulnerabilities?: Yes — 2 of silverstripe silverstripe-assets's CVEs have a known public exploit.
Which versions of silverstripe silverstripe-assets are affected?: 28 distinct silverstripe silverstripe-assets versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in silverstripe silverstripe-assets CVEs?: silverstripe silverstripe-assets's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication), CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-863 (Incorrect Authorization).
What is the average severity of silverstripe silverstripe-assets CVEs?: The average CVSS base score across silverstripe silverstripe-assets's scored CVEs is 5.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track silverstripe silverstripe-assets vulnerabilities

Get an alert for each new silverstripe silverstripe-assets CVE, with AI-written analysis and remediation steps.

Create an account See pricing