Silverpeas mishandles the "Personal space" feature that is selected when no componentId is set

Description

References

• nvd.nist.gov/vuln/detail/CVE-2026-53698 · ADVISORY
• Silverpeas/Silverpeas-Core commit caa6e6d · WEB
• Silverpeas/Silverpeas-Core · PACKAGE
• Silverpeas/Silverpeas-Core · WEB
• Silverpeas/Silverpeas-Core · WEB
• Silverpeas/Silverpeas-Core release 6.4.7 · WEB
• tracker.silverpeas.org/issues/15229 · WEB

Weitere Schwachstellen in org.silverpeas.core:silverpeas-core

• CVE-2025-46047MITTEL 6.5A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Silverpeas 6.4.1 and 6.4.2 allows remote attackers to…
• CVE-2024-56923MITTEL 5.4Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality in Silverpeas Core 6.3.1 <= 6…
• CVE-2024-42850KRITISCH 9.8An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.
• CVE-2024-36042KRITISCH 9.8Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often providing an unauthentic…
• CVE-2024-29392MITTEL 5.4Silverpeas Core 6.3 is vulnerable to Cross Site Scripting (XSS) via ClipboardSessionController.