CVE-2025-46047

CVE-2025-46047 affects Silverpeas versions 6.4.1 and 6.4.2. A user enumeration vulnerability exists in the /CredentialsServlet/ForgotPassword endpoint, where an attacker can determine valid usernames by the Login parameter. Root cause is exposed through a Forgot Password flow that reveals usernam...

Exploit for CVE-2025-46047

CVE-2025-46047 Silverpeas -u Example...