222 matches found
CVE-2024-42850
An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements...
CVE-2024-42849
An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function...
PT-2024-30182 · Unknown · Silverpeas
Name of the Vulnerable Software and Affected Versions: Silverpeas versions 6.4.2 and lower Description: The issue allows a remote attacker to cause a denial of service via the password change function. Recommendations: For Silverpeas versions 6.4.2 and lower, as a temporary workaround, consider...
CVE-2024-42849
An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function...
CVE-2024-42850
An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements...
Silverpeas 安全漏洞
Silverpeas is a suite of open source business collaboration platforms from Silverpeas Open Source. The platform includes applications for project management, blogs, forums, and document management. A security vulnerability exists in Silverpeas v.6.4.2 and earlier versions, which stems from a...
Silverpeas 安全漏洞
Silverpeas is a suite of open source business collaboration platforms from Silverpeas Open Source. The platform includes applications for project management, blogs, forums, and document management. A security vulnerability exists in Silverpeas v6.4.2 and earlier versions that stems from a problem...
CVE-2024-42850
An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements...
CVE-2024-42849
CVE-2024-42849 describes a vulnerability in Silverpeas v.6.4.2 and earlier where a remote attacker can cause a denial of service through the password change function. The issue is documented across multiple sources (NVD, OSV, CNNVD, CVE records). Affected product: Silverpeas 6.4.2 and older; root...
CVE-2024-42850
Silverpeas contains a vulnerability in the password-change flow (affecting v6.4.2 and earlier) that allows bypassing password complexity requirements. This is described across multiple sources (CVE-2024-42850, Red Hat/CVE, GHSA advisory, OSV) as a critical issue. Impact: bypass of password rules ...
PT-2024-30183 · Unknown · Silverpeas
Name of the Vulnerable Software and Affected Versions: Silverpeas versions 6.4.2 and lower Description: An issue in the password change function allows for the bypassing of password complexity requirements. Recommendations: For Silverpeas versions 6.4.2 and lower, update to a version that include...
CVE-2024-42849
An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function...
Silverpeas Core Cross-site Scripting vulnerability
In Silverpeas Core = 6.3.5, in Mes Agendas, a user can create new events and add them to their calendar. Additionally, users can invite others from the same domain, including administrators, to these events. A standard user can inject an XSS payload into the "Titre" and "Description" fields when...
GHSA-VFWH-GVF6-MFF8 Silverpeas Core Cross-site Scripting vulnerability
In Silverpeas Core = 6.3.5, in Mes Agendas, a user can create new events and add them to their calendar. Additionally, users can invite others from the same domain, including administrators, to these events. A standard user can inject an XSS payload into the "Titre" and "Description" fields when...
CVE-2024-39031
In Silverpeas Core = 6.3.5, in Mes Agendas, a user can create new events and add them to their calendar. Additionally, users can invite others from the same domain, including administrators, to these events. A standard user can inject an XSS payload into the "Titre" and "Description" fields when...
CVE-2024-39031
In Silverpeas Core = 6.3.5, in Mes Agendas, a user can create new events and add them to their calendar. Additionally, users can invite others from the same domain, including administrators, to these events. A standard user can inject an XSS payload into the "Titre" and "Description" fields when...
CVE-2024-39031
In Silverpeas Core = 6.3.5, in Mes Agendas, a user can create new events and add them to their calendar. Additionally, users can invite others from the same domain, including administrators, to these events. A standard user can inject an XSS payload into the "Titre" and "Description" fields when...
Silverpeas Security Vulnerabilities
Silverpeas is a suite of open source business collaboration platforms from Silverpeas Open Source. The platform includes applications for project management, blogs, forums, and document management. A security vulnerability exists in Silverpeas version 6.3.5 and earlier versions that stems from...
CVE-2024-39031
In Silverpeas Core = 6.3.5, in Mes Agendas, a user can create new events and add them to their calendar. Additionally, users can invite others from the same domain, including administrators, to these events. A standard user can inject an XSS payload into the "Titre" and "Description" fields when...