Description
Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control via the "Porlet Deployer" which allows administrators to deploy .WAR portlets.
Remediation
References
https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47321
Related Vulnerabilities
CVE-2022-31198 Vulnerability in npm package @openzeppelin/contracts
CVE-2021-23384 Vulnerability in npm package koa-remove-trailing-slashes
CVE-2020-7752 Vulnerability in npm package systeminformation
CVE-2022-26049 Vulnerability in maven package com.diffplug.gradle:goomph
CVE-2023-3635 Vulnerability in maven package com.squareup.okio:okio-jvm