CVE-2023-47327: Broken access control in Silverpeas

December 13, 2023

The “Create a Space” feature in Silverpeas Core 6.3.1 is reserved for use by administrators. This function suffers from broken access control, allowing any authenticated user to create a space by navigating to the correct URL.

References

silverpeas.com/
github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47327
github.com/advisories/GHSA-vpp3-hpcm-v944
nvd.nist.gov/vuln/detail/CVE-2023-47327

Detect and mitigate CVE-2023-47327 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →