CVE-2010-5080

CVE-2010-5080 describes an information leakage vulnerability in SilverStripe versions 2.3.x prior to 2.3.10 and 2.4.x prior to 2.4.4. When a user changes their password via email, a token is passed as a GET parameter, leading to its potential exposure in HTTP referer logs. This vulnerability has a CVSS score of 6.8, indicating a medium severity due to its network-based attack vector, medium complexity, and potential for partial confidentiality, integrity, and availability impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.