CVE-2023-47325

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-12-13 · updated 2026-07-09
Weakness: CWE-284

Description

Silverpeas Core 6.3.1 administrative "Bin" feature is affected by broken access control. A user with low privileges is able to navigate directly to the bin, revealing all deleted spaces. The user can then restore or permanently delete the spaces.

Affected products

Silverpeas: before 6.3.2 — fixed in 6.3.2

How to fix

Upgrade to a fixed version: Silverpeas 6.3.2. Check the vendor advisory for mitigations.

References

https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47325
https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47325

Get alerted when CVE-2023-47325 or the next vulnerability affects your stack