CVE-2023-47320

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-47320
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-47320.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-47320
Aliases
Published
2023-12-13T00:00:00Z
Modified
2026-08-12T03:51:19Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVSS Calculator
Summary
[none]
Details

Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control. An attacker with low privileges is able to execute the administrator-only function of putting the application in "Maintenance Mode" due to broken access control. This makes the application unavailable to all users. This affects Silverpeas Core 6.3.1 and below.

Database specific 
{
    "cna_assigner":  "mitre",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/47xxx/CVE-2023-47320.json"
}
References

Affected packages

Git / github.com/silverpeas/silverpeas-core

Affected ranges

Type
GIT
Repo
https://github.com/silverpeas/silverpeas-core
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
be7d7d580572c31f28e80e84dc3813c4ae6f6bd2
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:silverpeas:silverpeas:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "6.3.2"
        }
    ],
    "source":  "CPE_RANGE"
}

Affected versions

6.*
6.0-alpha1
6.0-alpha2
6.0-alpha3
6.0-beta1
6.0-rc1
6.0-rc2
6.0-rc3
6.3
core-5.*
core-5.11
core-5.12
core-5.6
core-5.7

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-47320.json"