CVE-2024-48814

Description

References

• gist.github.com/SubZ3r0-0x01/7150f7cbc3b7d810adb221cae3d08fc8 · Exploit
• Silverpeas/Silverpeas-Components#859 · Issue Tracking
• Silverpeas/Silverpeas-Core#1353 · Issue Tracking

Weitere Schwachstellen in silverpeas

• CVE-2025-46047MITTEL 6.5A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Silverpeas 6.4.1 and 6.4.2 allows remote attackers to…
• CVE-2025-45055MITTEL 5.4Silverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event management module. An authenticated user can upload…
• CVE-2024-56923MITTEL 5.4Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.3.1 <= 6…
• CVE-2024-42850KRITISCH 9.8An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.
• CVE-2024-42849MITTEL 6.5An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function.