CVE-2023-44401

The Silverstripe CMS GraphQL Server serves Silverstripe data as GraphQL representations. In versions 4.0.0 prior to 4.3.7 and 5.0.0 prior to 5.1.3, `canView` permission checks are bypassed for ORM data in paginated GraphQL query results where the total number of records is greater than the number of records per page. Note that this also affects GraphQL queries which have a limit applied, even if the query isn’t paginated per se. This has been fixed in versions 4.3.7 and 5.1.3 by ensuring no new records are pulled in from the database after performing `canView` permission checks for each page of results. This may result in some pages in the query results having less than the maximum number of records per page even when there are more pages of results. This behavior is consistent with how pagination works in other areas of Silverstripe CMS, such as in `GridField`, and is a result of having to perform permission checks in PHP rather than in the database directly. One may disable these permission checks by disabling the `CanViewPermission` plugin.

• CWE-863

• https://github.com/silverstripe/silverstripe-graphql/security/advisories/GHSA-jgph-w8rh-xf5pVendor Advisory
• https://www.silverstripe.org/download/security-releases/CVE-2023-44401Vendor Advisory
• https://github.com/silverstripe/silverstripe-graphql/security/advisories/GHSA-jgph-w8rh-xf5pVendor Advisory
• https://www.silverstripe.org/download/security-releases/CVE-2023-44401Vendor Advisory

Published

Jan 23, 2024

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-44396iTop is an IT service management platform. Dashlet edits aj…5.4
• CVE-2023-44397CloudExplorer Lite is an open source, lightweight cloud mana…9.8
• CVE-2023-44398Exiv2 is a C++ library and a command-line utility to read, w…8.8
• CVE-2023-44399ZITADEL provides identity infrastructure. In versions 2.37.2…5.3
• CVE-2023-4440A vulnerability was found in SourceCodester Free Hospital Ma…9.8
• CVE-2023-44400Uptime Kuma is a self-hosted monitoring tool. Prior to versi…7.8
• CVE-2023-44402Electron is an open source framework for writing cross-platf…7
• CVE-2023-44403D-Link DAP-1325 HNAP SetWLanRadioSettings Channel Command In…8.8
• CVE-2023-44404D-Link DAP-1325 get_value_from_app Stack-based Buffer Overfl…8.8
• CVE-2023-44405D-Link DAP-1325 get_value_of_key Stack-based Buffer Overflow…8.8
• CVE-2023-44406D-Link DAP-1325 SetAPLanSettings DeviceName Stack-based Buff…8.8
• CVE-2023-44407D-Link DAP-1325 SetAPLanSettings Gateway Stack-based Buffer …8.8