Description
Member_ProfileForm in security/Member.php in SilverStripe 2.3.x before 2.3.7 allows remote attackers to hijack user accounts by saving data using the email address (ID) of another user.
Remediation
References
Related Vulnerabilities
WordPress Plugin Social Sharing-Social Warfare Multiple Vulnerabilities (3.5.2)
SharePoint CVE-2023-33129 Vulnerability (CVE-2023-33129)
MySQL CVE-2018-3063 Vulnerability (CVE-2018-3063)
Oracle Application Server Other Vulnerability (CVE-2006-5361)
WordPress Plugin Highlight Search Terms Cross-Site Scripting (1.3)