CVE-2013-2653 describes an information disclosure vulnerability in SilverStripe 3.0.3, specifically within the security/MemberLoginForm.php component. This flaw allows for login attempts via GET requests, which can facilitate phishing attacks by making them harder for victims to detect. The vulnerability has a CVSS score of 5.8 (Medium), indicating a network-based attack with medium complexity, potentially leading to partial confidentiality and integrity impacts. While there is an ExploitDB entry (EDB-38689) detailing information disclosure, there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.0.3CPE matchmatch criteria | cpe:2.3:a:silverstripe:silverstripe:3.0.3:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:P/I:P/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.