critical9.8
CVE-2024-42850
Silverpeas vulnerable to password complexity rule bypass
Impact
An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.silverpeas.core:silverpeas-core | <= 6.4.2 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Silverpeas | Silverpeas | through 6.4.2 |