GitHub Advisoryadvisory · Maven

GHSA-whgv-6j78-5rh2 Broken access control in Silverpeas

LOW Published 2023-12-13 Modified 2023-12-13 Official page ↗
Aliases
CVE-2023-47320
Ecosystem
Maven
Packages
org.silverpeas.core:silverpeas-core-war, org.silverpeas.core:silverpeas-core-web
Severity
Low
Weaknesses
CWE-284
Reviewed
2023-12-13

Affected packages

• Maven org.silverpeas.core:silverpeas-core-war: < 6.3.2 → fixed in 6.3.2 • Maven org.silverpeas.core:silverpeas-core-web: < 6.3.2 → fixed in 6.3.2

Description

Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control. An attacker with low privileges is able to execute the administrator-only function of putting the application in "Maintenance Mode" due to broken access control. This makes the application unavailable to all users. This affects Silverpeas Core 6.3.1 and below.

Related

Alias · CVE (1)

  • CVE-2023-47320 Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control. vulnerability

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References