[MEDIUM] CVE-2023-49783 No permission checks for editing or deleting records with CSV import form

PKSA-ms6r-5yrz-36rx CVE-2023-49783 GHSA-j3m6-gvm8-mhvw

Affected package: silverstripe/admin

Affected version: >=1.0.0,<1.13.19|>=2.0.0,<2.1.8

Reported by:
GitHub, FriendsOfPHP/security-advisories