Vulnerability in Silverstripe

CVE-2010-5093

Member_ProfileForm in security/Member.php in SilverStripe 2.3.x before 2.3.7 allows remote attackers to hijack user accounts by saving data using the email address (ID) of another user.

EPSS: 0.015 (72.5th percentile) — read the EPSS interpretation.

Affected products

  • Silverstripe — versions 2.3.0, 2.3.1, 2.3.2
  • N/a — versions n/a

Weakness classification (CWE)

References