CVE-2010-5092

no score yetEPSS 0.4%

silverstripe silverstripe: no CVSS score yet. EPSS 0.4% chance of exploitation in the next 30 days.

The Add Member dialog in the Security admin page in SilverStripe 2.4.0 saves user passwords in plaintext, which allows local users to obtain sensitive information by reading a database.

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWE: CWE-255
Published: 2012-08-26
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

silverstripe:silverstripe

References

http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.1
http://open.silverstripe.org/changeset/107532
http://open.silverstripe.org/ticket/5772
http://www.openwall.com/lists/oss-security/2012/04/30/1
http://www.openwall.com/lists/oss-security/2012/04/30/3

Check your stack JSON