CVE-2023-47321

MediumCVSS 4.9

Published: 13/12/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.63%

46th percentile - higher than 46% of all known CVEs

Summary

Silverpeas Core 6.3.1 has an incorrect access control vulnerability in the 'Porlet Deployer' component, allowing administrators to deploy .WAR portlets. This could lead to unauthorized code execution or privilege escalation.

Risk Assessment

The risk is that administrators can deploy malicious .WAR portlets, potentially leading to full server compromise or data exfiltration.

Recommendation

Immediately upgrade Silverpeas Core to the latest patched version. Additionally, restrict administrator privileges and audit deployed portlets.

Original NVD description (English source)

Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control via the "Porlet Deployer" which allows administrators to deploy .WAR portlets.