Description
The "Create a Space" feature in Silverpeas Core 6.3.1 is reserved for use by administrators. This function suffers from broken access control, allowing any authenticated user to create a space by navigating to the correct URL.
Remediation
References
https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47327
Related Vulnerabilities
CVE-2022-23615 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore
CVE-2023-29216 Vulnerability in maven package org.apache.linkis:linkis-engineplugin-jdbc
CVE-2018-6561 Vulnerability in maven package org.webjars.bower:dijit
CVE-2008-6681 Vulnerability in maven package org.apache.geronimo.plugins:dojo
CVE-2022-36919 Vulnerability in maven package org.jenkins-ci.plugins:coverity