CVE-2019-12437: Silverstripe

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

In SilverStripe through 4.3.3, the previous fix for SS-2018-007 does not completely mitigate the risk of CSRF in GraphQL mutations,

Affected products

• Silverstripe Silverstripe: up to and including 4.3.3

Published 2020-02-19. Last modified 2026-06-17.