CVE-2010-5078

no score yetEPSS 1.9%

silverstripe silverstripe: no CVSS score yet. EPSS 1.9% chance of exploitation in the next 30 days.

SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain version information via a direct request to (1) apphire/silverstripe_version or (2) cms/silverstripe_version.

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2012-09-17
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

silverstripe:silverstripe

References

http://doc.silverstripe.org/framework/en/trunk/changelogs//2.3.10
http://doc.silverstripe.org/framework/en/trunk/changelogs//2.4.4
http://open.silverstripe.org/ticket/5031
http://secunia.com/advisories/42346
http://www.openwall.com/lists/oss-security/2011/01/03/12

Check your stack JSON