6.4 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
64.6%
SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive information.
doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.2
open.silverstripe.org/changeset/110757
www.openwall.com/lists/oss-security/2012/04/30/1
www.openwall.com/lists/oss-security/2012/04/30/3
www.openwall.com/lists/oss-security/2012/05/01/3