GitHub Advisoryadvisory · Maven

GHSA-qv8h-rqr3-mph9 Silverpeas mishandles the "Personal space" feature that is selected when no componentId is set

MEDIUM Published 2026-06-10 Modified 2026-08-17 Official page ↗
Aliases
CVE-2026-53698
Ecosystem
Maven
Packages
org.silverpeas.core:silverpeas-core-war, org.silverpeas.core:silverpeas-core
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-36
Reviewed
2026-08-17

Affected packages

• Maven org.silverpeas.core:silverpeas-core-war: <= 6.4-feature13197 (no fix yet) • Maven org.silverpeas.core:silverpeas-core: <= 6.4-feature13197 (no fix yet)

Description

Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set.

Related

Alias · CVE (1)

  • CVE-2026-53698 Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set. vulnerability

Weakness · CWE (1)

  • CWE-36 Absolute Path Traversal weakness

References