Unrated severityNVD Advisory· Published Aug 26, 2012· Updated Jun 16, 2026
CVE-2010-5080
CVE-2010-5080
Description
The Security/changepassword URL action in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 passes a token as a GET parameter while changing a password through email, which allows remote attackers to obtain sensitive data and hijack the session via the HTTP referer logs on a server, aka "HTTP referer leakage."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
20cpe:2.3:a:silverstripe:silverstripe:2.3.0:*:*:*:*:*:*:*+ 19 more
- cpe:2.3:a:silverstripe:silverstripe:2.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:silverstripe:silverstripe:2.3.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:silverstripe:silverstripe:2.3.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:silverstripe:silverstripe:2.3.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:silverstripe:silverstripe:2.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:silverstripe:silverstripe:2.3.1:rc1:*:*:*:*:*:*
- cpe:2.3:a:silverstripe:silverstripe:2.3.1:rc2:*:*:*:*:*:*
- cpe:2.3:a:silverstripe:silverstripe:2.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:silverstripe:silverstripe:2.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:silverstripe:silverstripe:2.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:silverstripe:silverstripe:2.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:silverstripe:silverstripe:2.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:silverstripe:silverstripe:2.3.7:*:*:*:*:*:*:*
- cpe:2.3:a:silverstripe:silverstripe:2.3.8:*:*:*:*:*:*:*
- cpe:2.3:a:silverstripe:silverstripe:2.3.9:*:*:*:*:*:*:*
- cpe:2.3:a:silverstripe:silverstripe:2.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:silverstripe:silverstripe:2.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:silverstripe:silverstripe:2.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:silverstripe:silverstripe:2.4.3:*:*:*:*:*:*:*
- (no CPE)range: 2.3.x < 2.3.10, 2.4.x < 2.4.4
Patches
Vulnerability mechanics
References
9- doc.silverstripe.org/sapphire/en/trunk/changelogs//2.3.10nvd
- doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.4nvd
- open.silverstripe.org/changeset/114758nvd
- secunia.com/advisories/42346nvd
- www.openwall.com/lists/oss-security/2011/01/03/12nvd
- www.openwall.com/lists/oss-security/2012/04/30/1nvd
- www.openwall.com/lists/oss-security/2012/04/30/3nvd
- www.openwall.com/lists/oss-security/2012/05/01/3nvd
- www.osvdb.org/69887nvd
News mentions
0No linked articles in our index yet.