Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

silverstripe/silverstripe-cms

              6 @ f85e5ef
            

Fixes

CVEs

CRITICAL

Peak severity

72.4%

Coverage

Highlights

Auth Bypass: 18 prior fixes. Scrutinize any change in this area.

code/SecurityAdmin.php: most-fixed (7 issues). Treat as high-risk during review.

27 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Multiple fixes added permission checks (canCreate, canArchive, canView, ADMIN) to page operations like duplicate, archive, childfilter, and getpagecount, indicating a pattern of missing ACL enforcement on CMS actions.

Auth Bypass: Repeated authorization gaps in member/group management: autocomplete leaked member names without canEdit, addmember allowed arbitrary class instantiation, and save/delete/addgroup lacked permission checks.

SQL Injection: URLSegment was interpolated unsanitized into SQL in get_one calls; two separate commits fixed the same flaw, indicating a persistent pattern of raw string concatenation in data access.