medium4.3
CVE-2023-47327
Broken access control in Silverpeas
Impact
The "Create a Space" feature in Silverpeas Core 6.3.1 is reserved for use by administrators. This function suffers from broken access control, allowing any authenticated user to create a space by navigating to the correct URL.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.silverpeas.core:silverpeas-core-web | < 6.3.2 | 6.3.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Silverpeas | Silverpeas | before 6.3.2 |