Description

Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control via the "Porlet Deployer" which allows administrators to deploy .WAR portlets.

Remediation

References

http://silverpeas.com

https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47321

Related Vulnerabilities

CVE-2021-33561 Vulnerability in maven package com.shopizer:shopizer

CVE-2023-34617 Vulnerability in maven package com.owlike:genson

CVE-2022-0624 Vulnerability in maven package org.webjars.npm:parse-path

CVE-2020-8131 Vulnerability in maven package org.webjars.npm:yarn

CVE-2021-27185 Vulnerability in npm package samba-client

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Tags

Product Exploit Third Party Advisory NVD-CWE-Other