GHSA-whgv-6j78-5rh2Low

Broken access control in Silverpeas

Published
December 13, 2023
Last Modified
December 13, 2023

🔗 CVE IDs covered (1)

CVE-2023-47320 →

📋 Description

Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control. An attacker with low privileges is able to execute the administrator-only function of putting the application in "Maintenance Mode" due to broken access control. This makes the application unavailable to all users. This affects Silverpeas Core 6.3.1 and below.

🎯 Affected products2

  • maven/org.silverpeas.core:silverpeas-core-war:< 6.3.2
  • maven/org.silverpeas.core:silverpeas-core-web:< 6.3.2

🔗 References (5)