CVE-2010-5188: SilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information via the (1) debug_m...

Security readout for executives and security teams

This is an old SilverStripe information disclosure issue. A remote attacker could cause certain debug-related parameters to expose sensitive runtime details on SilverStripe 2.3.x sites before 2.3.6. The bundle does not show active exploitation or a CVSS score. Exposure is most likely on legacy public SilverStripe 2.3.x deployments that remain below 2.3.6. Modern SilverStripe installations are not shown as affected by the supplied sources. Asset inventory is important because this is a 2010-era branch likely to survive only in older, neglected sites. Treat this as a legacy exposure cleanup item. It is not KEV-listed in the bundle, but affected internet-facing systems could leak sensitive technical details. Prioritize remediation where SilverStripe 2.3.x is public-facing or handles sensitive workflows. Mitigation focus: Identify any SilverStripe 2.3.x deployments and confirm their exact version.; Upgrade affected 2.3.x systems to at least 2.3.6 or current vendor-supported guidance.; Ensure production debug and profiling features are disabled..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.