CVE-2017-14498

SilverStripe CMS before 3.6.1 has XSS via an SVG document that is mishandled by (1) the Insert Media option in the content editor or (2) an admin/assets/add pathname, as demonstrated by the admin/pages/edit/EditorToolbar/MediaForm/field/AssetUploadField/upload URI, aka issue SS-2017-017.

• CWE-79

• http://lists.openwall.net/full-disclosure/2017/09/14/2Exploit, Mailing List, Third Party Advisory
• https://docs.silverstripe.org/en/3/changelogs/3.6.1Vendor Advisory
• https://github.com/silverstripe/silverstripe-framework/commit/25b77a2ff8deabe8e8894002b9a5647eaec27b0aThird Party Advisory
• https://github.com/silverstripe/silverstripe-installer/commit/c25478bef75cc5482852e80a1fa6f1f0e6460e39Third Party Advisory
• http://lists.openwall.net/full-disclosure/2017/09/14/2Exploit, Mailing List, Third Party Advisory
• https://docs.silverstripe.org/en/3/changelogs/3.6.1Vendor Advisory
• https://github.com/silverstripe/silverstripe-framework/commit/25b77a2ff8deabe8e8894002b9a5647eaec27b0aThird Party Advisory
• https://github.com/silverstripe/silverstripe-installer/commit/c25478bef75cc5482852e80a1fa6f1f0e6460e39Third Party Advisory

Published

Sep 15, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14492Heap-based buffer overflow in dnsmasq before 2.78 allows rem…
• CVE-2017-14493Stack-based buffer overflow in dnsmasq before 2.78 allows re…
• CVE-2017-14494dnsmasq before 2.78, when configured as a relay, allows remo…
• CVE-2017-14495Memory leak in dnsmasq before 2.78, when the --add-mac, --ad…
• CVE-2017-14496Integer underflow in the add_pseudoheader function in dnsmas…
• CVE-2017-14497The tpacket_rcv function in net/packet/af_packet.c in the Li…7.8
• CVE-2017-1450IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote atta…
• CVE-2017-14500Improper Neutralization of Special Elements used in an OS Co…
• CVE-2017-14501An out-of-bounds read flaw exists in parse_file_info in arch…
• CVE-2017-14502read_header in archive_read_support_format_rar.c in libarchi…
• CVE-2017-14503libarchive 3.3.2 suffers from an out-of-bounds read within l…
• CVE-2017-14504ReadPNMImage in coders/pnm.c in GraphicsMagick 1.3.26 does n…