medium4.9
CVE-2023-47321
Broken access control in Silverpeas
Impact
Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control via the "Porlet Deployer" which allows administrators to deploy .WAR portlets.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.silverpeas.core:silverpeas-core-web | < 6.3.2 | 6.3.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Silverpeas | Silverpeas | before 6.3.2 |