Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-53698 EUVD-2026-36068GHSA-qv8h-rqr3-mph9

Silverpeas mishandles the "Personal space" feature that is selected when no componentId is set

Published Jun 10, 2026 · Updated Jun 10, 2026 · Assigned by mitre

Vendor: Silverpeas Product: Silverpeas Package: org.silverpeas.core:silverpeas-core Package: org.silverpeas.core:silverpeas-core-war Ecosystem: Maven

Description

Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set.

Affected products

VendorProductAffectedFixed
Silverpeas Silverpeas ≤ 6.4.6 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.silverpeas.core:silverpeas-core <= 6.4-feature13197 — GHSA-qv8h-rqr3-mph9
Maven org.silverpeas.core:silverpeas-core-war <= 6.4-feature13197 — GHSA-qv8h-rqr3-mph9

References