silverpeas/silverpeas-core · Security
Broken access control in Silverpeas
- GHSA ID
- GHSA-whgv-6j78-5rh2
- CVE ID
- CVE-2023-47320
- Severity
- low
- Published
- Updated
Description
Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control. An attacker with low privileges is able to execute the administrator-only function of putting the application in "Maintenance Mode" due to broken access control. This makes the application unavailable to all users. This affects Silverpeas Core 6.3.1 and below.
CWEs
- CWE-284 · Improper Access Control