Description

Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control. An attacker with low privileges is able to execute the administrator-only function of putting the application in "Maintenance Mode" due to broken access control. This makes the application unavailable to all users. This affects Silverpeas Core 6.3.1 and below.

Remediation

References

http://silverpeas.com

https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47320

Related Vulnerabilities

CVE-2020-11007 Vulnerability in maven package com.shopizer:sm-core-model

CVE-2023-41329 Vulnerability in maven package org.wiremock:wiremock

CVE-2019-19771 Vulnerability in npm package bitconid-rpc

CVE-2021-22096 Vulnerability in maven package org.springframework:spring-webflux

CVE-2018-20835 Vulnerability in npm package tar-fs

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Tags

Product Exploit Third Party Advisory NVD-CWE-Other