Описание
SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive information.
SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive information.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2010-5089
- http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.2
- http://open.silverstripe.org/changeset/110757
- http://www.openwall.com/lists/oss-security/2012/04/30/1
- http://www.openwall.com/lists/oss-security/2012/04/30/3
- http://www.openwall.com/lists/oss-security/2012/05/01/3
EPSS
Процентиль: 77%
0.01822
Низкий
CVE ID
Связанные уязвимости
nvd
почти 14 лет назад
SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive information.
debian
почти 14 лет назад
SilverStripe before 2.4.2 does not properly restrict access to pages i ...
EPSS
Процентиль: 77%
0.01822
Низкий