Kurz gesagt
- CVE-2023-47322 ist eine Schwachstelle (HOCH (CVSS 8.8)) in org.silverpeas.core:silverpeas-core-web, silverpeas (silverpeas).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.39%, höher als bei 33.3% aller Schwachstellen.
- Abhilfe: auf 6.3.2 oder neuer aktualisieren.
Description
The "userModify" feature of Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) leading to privilege escalation. If an administrator goes to a malicious URL while being authenticated to the Silverpeas application, the CSRF with execute making the attacker an administrator user in the application.
NVD description
The "userModify" feature of Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) leading to privilege escalation. If an administrator goes to a malicious URL while being authenticated to the Silverpeas application, the CSRF with execute making the attacker an administrator user in the application.
Weitere Schwachstellen in org.silverpeas.core:silverpeas-core-web
Alle anzeigen →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free