medium5.4
CVE-2023-47325
Broken access control in Silverpeas
Impact
Silverpeas Core 6.3.1 administrative "Bin" feature is affected by broken access control. A user with low privileges is able to navigate directly to the bin, revealing all deleted spaces. The user can then restore or permanently delete the spaces.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.silverpeas.core:silverpeas-core-web | < 6.3.2 | 6.3.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Silverpeas | Silverpeas | before 6.3.2 |