Medium · 4.9 CVE-2023-47321 EUVD-2023-3071GHSA-28wg-8gv4-mpjf

Broken access control in Silverpeas

Published Dec 13, 2023 · Updated Jul 9, 2026 · Assigned by mitre

Description

Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control via the "Porlet Deployer" which allows administrators to deploy .WAR portlets.

Ecosystem	Package	Affected	Fixed	Record
Maven	org.silverpeas.core:silverpeas-core-web	< 6.3.2	6.3.2	GHSA-28wg-8gv4-mpjf