Description
The "Create a Space" feature in Silverpeas Core 6.3.1 is reserved for use by administrators. This function suffers from broken access control, allowing any authenticated user to create a space by navigating to the correct URL.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.silverpeas.core:silverpeas-core-web | < 6.3.2 | 6.3.2 | GHSA-vpp3-hpcm-v944 |