Lucene search
+L

4 matches found

attackerkb
attackerkb
•added 2023/12/13 2:15 p.m.•7 views

CVE-2023-47322

The "userModify" feature of Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery CSRF leading to privilege escalation. If an administrator goes to a malicious URL while being authenticated to the Silverpeas application, the CSRF with execute making the attacker an administrator user ...

8.8CVSS7.3AI score0.00395EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/13 12:00 a.m.•3 views

CVE-2023-47322: Cross-Site Request Forgery (CSRF)

The "userModify" feature of Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery CSRF leading to privilege escalation. If an administrator goes to a malicious URL while being authenticated to the Silverpeas application, the CSRF with execute making the attacker an administrator user ...

8.8CVSS8.2AI score0.00395EPSS
SaveExploits1References4
Mend
Mend
•added 2023/12/13 12:00 a.m.•3 views

CVE-2023-47322

The "userModify" feature of Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery CSRF leading to privilege escalation. If an administrator goes to a malicious URL while being authenticated to the Silverpeas application, the CSRF with execute making the attacker an administrator user ...

8.8CVSS0.00395EPSS
SaveExploits1References5
CVE
CVE
•added 2023/12/13 12:00 a.m.•49 views

CVE-2023-47322

CVE-2023-47322 — Silverpeas Core 6.3.1 CSRF leads to privilege escalation. The vulnerability is a CSRF in the userModify feature that, when an authenticated administrator visits a malicious URL, can elevate the attacker to administrator status within the Silverpeas application. Primary sources (N...

8.8CVSS8.8AI score0.00395EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder