Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS13aGd2LTZqNzgtNXJoMs4AA3vI

Broken access control in Silverpeas

Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control. An attacker with low privileges is able to execute the administrator-only function of putting the application in "Maintenance Mode" due to broken access control. This makes the application unavailable to all users. This affects Silverpeas Core 6.3.1 and below.

Permalink: https://github.com/advisories/GHSA-whgv-6j78-5rh2
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13aGd2LTZqNzgtNXJoMs4AA3vI
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Low
Classification: General
Published: 12 months ago
Updated: 12 months ago

Identifiers: GHSA-whgv-6j78-5rh2, CVE-2023-47320
References:

• https://nvd.nist.gov/vuln/detail/CVE-2023-47320
• https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47320
• http://silverpeas.com
• https://github.com/Silverpeas/Silverpeas-Core/commit/fcb4a9740b6c80859e435045b549290a82ae84a2
• https://github.com/advisories/GHSA-whgv-6j78-5rh2

Repository: https://github.com/RhinoSecurityLabs/CVEs
Blast Radius: 1.0

Affected Packages