CVE-2011-4961

CVE-2011-4961 is a privilege escalation vulnerability affecting SilverStripe versions 2.3.x before 2.3.12 and 2.4.x before 2.4.6. Remote authenticated users with EDIT_PERMISSIONS can exploit a flaw in the TreeMultiselectField to add themselves to administrator groups, thereby gaining full administrator privileges. This vulnerability has a CVSS score of 6.0, indicating a medium severity due to its network-based attack vector, medium attack complexity, and partial impact on confidentiality, integrity, and availability. There is no known active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.