CVE-2024-48814

SQL Injection vulnerability in Silverpeas 6.4.1 allows a remote attacker to obtain sensitive information via the ViewType parameter of the findbywhereclause function...

CVE-2024-48814

SQL Injection vulnerability in Silverpeas 6.4.1 allows a remote attacker to obtain sensitive information via the ViewType parameter of the findbywhereclause function...

CVE-2024-48814

SQL Injection vulnerability in Silverpeas 6.4.1 allows a remote attacker to obtain sensitive information via the ViewType parameter of the findbywhereclause function...

Silverpeas 安全漏洞

Silverpeas is a suite of open source business collaboration platforms from Silverpeas Open Source. The platform includes applications for project management, blogs, forums and document management. A security vulnerability exists in Silverpeas version 6.4.1, which stems from the presence of a SQL...

GHSA-H6JQ-W432-J26W Silverpeas vulnerable to password complexity rule bypass

An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements...

Silverpeas vulnerable to password complexity rule bypass

An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements...

CVE-2024-42850

An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements...

CVE-2024-42850

An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements...

CVE-2024-42850

An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements...

CVE-2024-42849

An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function...

PT-2024-30182 · Unknown · Silverpeas

Name of the Vulnerable Software and Affected Versions: Silverpeas versions 6.4.2 and lower Description: The issue allows a remote attacker to cause a denial of service via the password change function. Recommendations: For Silverpeas versions 6.4.2 and lower, as a temporary workaround, consider...

CVE-2024-42849

An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function...

Silverpeas 安全漏洞

Silverpeas is a suite of open source business collaboration platforms from Silverpeas Open Source. The platform includes applications for project management, blogs, forums, and document management. A security vulnerability exists in Silverpeas v.6.4.2 and earlier versions, which stems from a...

Silverpeas 安全漏洞

Silverpeas is a suite of open source business collaboration platforms from Silverpeas Open Source. The platform includes applications for project management, blogs, forums, and document management. A security vulnerability exists in Silverpeas v6.4.2 and earlier versions that stems from a problem...

CVE-2024-42849

CVE-2024-42849 describes a vulnerability in Silverpeas v.6.4.2 and earlier where a remote attacker can cause a denial of service through the password change function. The issue is documented across multiple sources (NVD, OSV, CNNVD, CVE records). Affected product: Silverpeas 6.4.2 and older; root...

CVE-2024-42850

An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements...

CVE-2024-42850

Silverpeas contains a vulnerability in the password-change flow (affecting v6.4.2 and earlier) that allows bypassing password complexity requirements. This is described across multiple sources (CVE-2024-42850, Red Hat/CVE, GHSA advisory, OSV) as a critical issue. Impact: bypass of password rules ...

PT-2024-30183 · Unknown · Silverpeas

Name of the Vulnerable Software and Affected Versions: Silverpeas versions 6.4.2 and lower Description: An issue in the password change function allows for the bypassing of password complexity requirements. Recommendations: For Silverpeas versions 6.4.2 and lower, update to a version that include...

CVE-2024-42849

An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function...

Silverpeas Core Cross-site Scripting vulnerability

In Silverpeas Core = 6.3.5, in Mes Agendas, a user can create new events and add them to their calendar. Additionally, users can invite others from the same domain, including administrators, to these events. A standard user can inject an XSS payload into the "Titre" and "Description" fields when...