silverpeas.com
http://silverpeas.com/ CVE-2023-47324
MEDIUM
Cross-site Scripting in silverpeas
Record summary
CVE-2023-47324 has a selected CVSS score of 5.4 (medium); EIP currently links 1 curated repository PoC.
Description
Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting (XSS) via the message/notification feature.
Description source: CVE List
Exploitation context
Available material
- Curated repository PoCs
- 1
Affected products and versions
4| Product | Source | Version range | Status |
|---|---|---|---|
org.silverpeas.core:silverpeas-core-apiBrowse Maven / org.silverpeas.core:silverpeas-core-api | GitHub Advisory | Before 6.3.2 · Fixed in 6.3.2 | affected |
org.silverpeas.core:silverpeas-core-configurationBrowse Maven / org.silverpeas.core:silverpeas-core-configuration | GitHub Advisory | Before 6.3.2 · Fixed in 6.3.2 | affected |
org.silverpeas.core:silverpeas-core-warBrowse Maven / org.silverpeas.core:silverpeas-core-war | GitHub Advisory | Before 6.3.2 · Fixed in 6.3.2 | affected |
org.silverpeas.core:silverpeas-core-webBrowse Maven / org.silverpeas.core:silverpeas-core-web | GitHub Advisory | Before 6.3.2 · Fixed in 6.3.2 | affected |
Proofs of concept
1Curated repository PoCs
GitHubCVE-2023-47324Curated repository PoCby RhinoSecurityLabsStars: 905Not analyzed1 file
References
5github.com
https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47324 github.com
https://github.com/Silverpeas/Silverpeas-Core/commit/9cb2941e9242db3df179c1170d7695c9917e4e9c github.com
https://github.com/Silverpeas/Silverpeas-Core/pull/1298/commits nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-47324