Description
SilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information via the (1) debug_memory parameter to core/control/Director.php or (2) debug_profile parameter to main.php.
Remediation
References
Related Vulnerabilities
IBMHttpServer Uncontrolled Resource Consumption Vulnerability (CVE-2026-8856)
WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.33)
Squid Improper Handling of Exceptional Conditions Vulnerability (CVE-2023-5824)
WordPress Plugin Product Addons & Fields for WooCommerce Cross-Site Scripting (32.0.6)
WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Remote Code Execution (2.8.5)