AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2010-5080

MEDIUM · CVSS 6.8 EPSS 1.22%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-08-26 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2010-5080
Severity
MEDIUM
CVSS
6.8
EPSS
1.22%

Original NVD Description

The Security/changepassword URL action in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 passes a token as a GET parameter while changing a password through email, which allows remote attackers to obtain sensitive data and hijack the session via the HTTP referer logs on a server, aka "HTTP referer leakage."