Silverpeas: >> Silverpeas >> 5.10.3 Security Vulnerabilities
Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) via the Domain SQL Create function.
CVSS Score
8.8
EPSS Score
0.002
Published
2023-12-13
The "Create a Space" feature in Silverpeas Core 6.3.1 is reserved for use by administrators. This function suffers from broken access control, allowing any authenticated user to create a space by navigating to the correct URL.
CVSS Score
4.3
EPSS Score
0.001
Published
2023-12-13
Page 2