Launchpad.net

CVE 2010-5089

SilverStripe before 2.4.2 does not properly restrict access to pages in draft mode, which allows remote attackers to obtain sensitive information.

See the CVE page on Mitre.org for more details.