Description
The "Create a Space" feature in Silverpeas Core 6.3.1 is reserved for use by administrators. This function suffers from broken access control, allowing any authenticated user to create a space by navigating to the correct URL.
Remediation
References
http://silverpeas.com
https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47327
Related Vulnerabilities
CVE-2021-21304 Vulnerability in npm package dynamoose
CVE-2020-28438 Vulnerability in npm package deferred-exec
CVE-2023-34616 Vulnerability in maven package com.progsbase.libraries:json
CVE-2021-41862 Vulnerability in maven package com.googlecode.aviator:aviator
CVE-2019-10757 Vulnerability in maven package org.webjars.npm:knex