CVE-2019-16409

In the Versioned Files module through 2.0.3 for SilverStripe 3.x, unpublished versions of files are publicly exposed to anyone who can guess their URL. This guess could be highly informed by a basic understanding of the symbiote/silverstripe-versionedfiles source code. (Users who upgrade from SilverStripe 3.x to 4.x and had Versioned Files installed have no further need for this module, because the 4.x release has built-in versioning. However, nothing in the upgrade process automates the destruction of these insecure artefacts, nor alerts the user to the criticality of destruction.)

• https://github.com/silverstripe/silverstripe-frameworkProduct, Third Party Advisory
• https://github.com/symbiote/silverstripe-versionedfilesProduct, Third Party Advisory
• https://www.silverstripe.org/download/security-releases/cve-2019-16409Vendor Advisory
• https://github.com/silverstripe/silverstripe-frameworkProduct, Third Party Advisory
• https://github.com/symbiote/silverstripe-versionedfilesProduct, Third Party Advisory
• https://www.silverstripe.org/download/security-releases/cve-2019-16409Vendor Advisory

Published

Sep 26, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16401Samsung Galaxy S8 plus (Android version: 8.0.0, Build Number…6.5
• CVE-2019-16403In Webkul Bagisto before 0.1.5, the functionalities for cust…8.8
• CVE-2019-16404Authenticated SQL Injection in interface/forms/eye_mag/js/ey…8.8
• CVE-2019-16405Centreon Web before 2.8.30, 18.10.x before 18.10.8, 19.04.x …7.2
• CVE-2019-16406Centreon Web 19.04.4 has weak permissions within the OVA (ak…7.8
• CVE-2019-16407JetBrains ReSharper installers for versions before 2019.2 ha…7.3
• CVE-2019-1641A vulnerability in the Cisco Webex Network Recording Player …7.8
• CVE-2019-16410An issue was discovered in Suricata 4.1.4. By sending multip…9.1
• CVE-2019-16411An issue was discovered in Suricata 4.1.4. By sending multip…9.8
• CVE-2019-16412In goform/setSysTools on Tenda N301 wireless routers, attack…7.5
• CVE-2019-16413An issue was discovered in the Linux kernel before 5.0.4. Th…7.5
• CVE-2019-16414A DOM based XSS in GFI Kerio Control v9.3.0 allows embedding…6.1