[MEDIUM] CVE-2022-29858: Unpublished, protected files can be published via shortcode

PKSA-gkm3-w29w-mn8y CVE-2022-29858 GHSA-v68g-62v9-39w5

Affected package: silverstripe/assets

Affected version: >=1.0.0,<1.10.1

Reported by:
GitHub, FriendsOfPHP/security-advisories