CVE-2010-5092: Silverstripe

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

The Add Member dialog in the Security admin page in SilverStripe 2.4.0 saves user passwords in plaintext, which allows local users to obtain sensitive information by reading a database.

Affected products

• Silverstripe Silverstripe: version 2.4.0 only

Published 2012-08-26. Last modified 2026-06-16.