Description
security/MemberLoginForm.php in SilverStripe 3.0.3 supports credentials in a GET request, which allows remote or local attackers to obtain sensitive information by reading web-server access logs, web-server Referer logs, or the browser history, a similar vulnerability to CVE-2013-2653.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Hide & Security Enhancer Arbitrary File Download (1.3.9.2)
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2020-10968)
OpenSSL Missing Cryptographic Step Vulnerability (CVE-2026-45446)
WordPress Plugin PDF Flipbook, 3D Flipbook WordPress-DearFlip Cross-Site Scripting (1.7.9)