CVE-2010-5088

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-08-26 · updated 2026-06-16
Weakness: CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in SilverStripe 2.3.x before 2.3.9 and 2.4.x before 2.4.3 allow remote attackers to hijack the authentication of administrators via destructive controller actions, a different vulnerability than CVE-2010-5087.

Affected products

Silverstripe: 2.3.0, 2.3.0-rc1, 2.3.0-rc2, 2.3.0-rc3, 2.3.1, 2.3.1-rc1 (+11)

References

http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.3.9
http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.3
http://holisticinfosec.org/content/view/157/45/
http://open.silverstripe.org/changeset/113275
http://open.silverstripe.org/changeset/113282
http://secunia.com/advisories/41717
http://www.openwall.com/lists/oss-security/2011/01/03/12
http://www.openwall.com/lists/oss-security/2012/04/30/1
http://www.openwall.com/lists/oss-security/2012/04/30/3
http://www.openwall.com/lists/oss-security/2012/05/01/3
http://www.osvdb.org/69113
http://www.securityfocus.com/bid/44768

Get alerted when CVE-2010-5088 or the next vulnerability affects your stack