Kurz gesagt
- CVE-2023-47325 ist eine Schwachstelle (MITTEL (CVSS 5.4)) in org.silverpeas.core:silverpeas-core-web, silverpeas (silverpeas).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.41%, höher als bei 35.3% aller Schwachstellen.
- Abhilfe: auf 6.3.2 oder neuer aktualisieren.
Description
Silverpeas Core 6.3.1 administrative "Bin" feature is affected by broken access control. A user with low privileges is able to navigate directly to the bin, revealing all deleted spaces. The user can then restore or permanently delete the spaces.
NVD description
Silverpeas Core 6.3.1 administrative "Bin" feature is affected by broken access control. A user with low privileges is able to navigate directly to the bin, revealing all deleted spaces. The user can then restore or permanently delete the spaces.
Weitere Schwachstellen in org.silverpeas.core:silverpeas-core-web
Alle anzeigen →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free