CVE-2023-47325: Broken access control in Silverpeas

December 13, 2023

Silverpeas Core 6.3.1 administrative “Bin” feature is affected by broken access control. A user with low privileges is able to navigate directly to the bin, revealing all deleted spaces. The user can then restore or permanently delete the spaces.

References

silverpeas.com/
github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47325
github.com/advisories/GHSA-42g3-3jwm-63rx
nvd.nist.gov/vuln/detail/CVE-2023-47325

Code Behaviors & Features

Detect and mitigate CVE-2023-47325 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →