CVE-2023-47327: Broken access control in Silverpeas

December 13, 2023

The “Create a Space” feature in Silverpeas Core 6.3.1 is reserved for use by administrators. This function suffers from broken access control, allowing any authenticated user to create a space by navigating to the correct URL.

References

silverpeas.com/
github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47327
github.com/advisories/GHSA-vpp3-hpcm-v944
nvd.nist.gov/vuln/detail/CVE-2023-47327

Code Behaviors & Features

Detect and mitigate CVE-2023-47327 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →