CVE-2015-5062: Silverstripe

Medium severity, CVSS 5.8. EPSS: 2% chance of exploitation in the next 30 days.

Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the returnURL parameter to dev/build.

Affected products

• Silverstripe Silverstripe: version 3.1.13 only

Published 2015-06-24. Last modified 2026-06-17.