Description
Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control via the "Porlet Deployer" which allows administrators to deploy .WAR portlets.
Remediation
References
http://silverpeas.com
https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47321
Related Vulnerabilities
CVE-2018-21268 Vulnerability in npm package traceroute
CVE-2020-8131 Vulnerability in maven package org.webjars.npm:yarn
CVE-2020-8203 Vulnerability in maven package org.fujion.webjars:lodash
CVE-2022-31943 Vulnerability in maven package net.mingsoft:ms-mcms
CVE-2022-31018 Vulnerability in maven package com.typesafe.play:play_2.13