CVE-2023-47323

The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter. This allows an attacker to read all messages sent between other users; including those sent only to administrators...

Silverpeas Cross-Site Scripting Vulnerability

Silverpeas is an open source business collaboration platform. The platform includes applications for project management, blogs, forums and document management. A cross-site scripting vulnerability exists in Silverpeas Core version 6.3.1, which stems from vulnerability to cross-site scripting XSS...

CVE-2023-47323: Undefined Security Weakness

The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter. This allows an attacker to read all messages sent between other users; including those sent only to administrators...