CVE-2019-19326
Last modified
CVE-2019-19326 is a medium-severity vulnerability rated 5.9/10 on the CVSS scale. Silverstripe CMS sites through 4.4.4 which have opted into HTTP Cache Headers on responses served by the framework's HTTP layer can be vulnerable to web cache poisoning. Through modifying the X-Original-Url and X-HTTP-Method-Override headers, responses with malicious HTTP headers can return unexpected responses to other consumers of this cached response. EPSS estimates a 0.76% chance of exploitation in the next 30 days.
Description
Silverstripe CMS sites through 4.4.4 which have opted into HTTP Cache Headers on responses served by the framework's HTTP layer can be vulnerable to web cache poisoning. Through modifying the X-Original-Url and X-HTTP-Method-Override headers, responses with malicious HTTP headers can return unexpected responses to other consumers of this cached response. Most other headers associated with web cache poisoning are already disabled through request hostname forgery whitelists.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Silverstripe | Silverstripe | >= 3.0.0, < 3.7.5 |
| Silverstripe | Silverstripe | >= 4.0.0, < 4.4.7 |
| Silverstripe | Silverstripe | >= 4.5.0, < 4.5.4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-19326?
How severe is CVE-2019-19326?
How do I fix CVE-2019-19326?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-19317lookupName in resolve.c in SQLite 3.30.1 omits bits from the…9.8
- CVE-2019-19318In the Linux kernel 5.3.11, mounting a crafted btrfs image t…4.4
- CVE-2019-19319In the Linux kernel before 5.2, a setxattr operation, after …6.5
- CVE-2019-1932A vulnerability in Cisco Advanced Malware Protection (AMP) f…6.7
- CVE-2019-19324Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported …7.5
- CVE-2019-19325SilverStripe through 4.4.x before 4.4.5 and 4.5.x before 4.5…6.1
- CVE-2019-19327ui/ResultView.js in Wikibase Wikidata Query Service GUI befo…6.1
- CVE-2019-19328ui/editor/tooltip/Rdf.js in Wikibase Wikidata Query Service …6.1
- CVE-2019-19329In Wikibase Wikidata Query Service GUI before 0.3.6-SNAPSHOT…6.1
- CVE-2019-1933A vulnerability in the email message scanning of Cisco Async…5.8
- CVE-2019-19330The HTTP/2 implementation in HAProxy before 2.0.10 mishandle…9.8
- CVE-2019-19331knot-resolver before version 4.3.0 is vulnerable to denial o…7.5
Are you affected by CVE-2019-19326?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST