Описание
SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive information.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| silverstripe | itp | package |
Примечания
http://seclists.org/oss-sec/2012/q2/209
EPSS
Процентиль: 77%
0.01822
Низкий
Связанные уязвимости
nvd
почти 14 лет назад
SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive information.
github
около 4 лет назад
SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive information.
EPSS
Процентиль: 77%
0.01822
Низкий