https://db.gcve.eu/sightings/feed 2026-05-14T23:23:09.946870+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent sightings. https://db.gcve.eu/sighting/3f2402a5-619e-48ee-b6b4-c51534c644b0/export 2026-05-14T23:23:10.309761+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "3f2402a5-619e-48ee-b6b4-c51534c644b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-32302", "type": "seen", "source": "https://t.me/cibsecurity/67498", "content": "\u203c CVE-2023-32302 \u203c\n\nSilverstripe Framework is the MVC framework that powers Silverstripe CMS. When a new member record is created and a password is not set, an empty encrypted password is generated. As a result, if someone is aware of the existence of a member record associated with a specific email address, they can potentially attempt to log in using that empty password. Although the default member authenticator and login form require a non-empty password, alternative authentication methods might still permit a successful login with the empty password. This issue has been patched in versions 4.13.4 and 5.0.13.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-01T15:20:06.000000Z"} 2023-08-01T15:20:06+00:00