In short
- CVE-2023-47327 is a MEDIUM (CVSS 4.3) vulnerability affecting org.silverpeas.core:silverpeas-core-web, silverpeas (silverpeas).
- Chance of exploitation in the next 30 days (EPSS): 0.52%, higher than 44.0% of all vulnerabilities.
- Fix: update to 6.3.2 or later.
Description
The "Create a Space" feature in Silverpeas Core 6.3.1 is reserved for use by administrators. This function suffers from broken access control, allowing any authenticated user to create a space by navigating to the correct URL.
NVD description
The "Create a Space" feature in Silverpeas Core 6.3.1 is reserved for use by administrators. This function suffers from broken access control, allowing any authenticated user to create a space by navigating to the correct URL.
More vulnerabilities in org.silverpeas.core:silverpeas-core-web
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free