CVE-2023-47325

MediumCVSS 5.4

Published: 13/12/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

33th percentile - higher than 33% of all known CVEs

Summary

A vulnerability in Silverpeas Core 6.3.1 administrative 'Bin' feature allows a low-privileged user to access the bin, revealing all deleted spaces. The user can then restore or permanently delete these spaces.

Risk Assessment

The risk involves unauthorized access to sensitive data and the ability to permanently delete it by unauthorized users, potentially leading to data loss and system integrity compromise.

Recommendation

Immediately update Silverpeas Core to the latest version that includes the access control fix, and review user permissions.

Original NVD description (English source)

Silverpeas Core 6.3.1 administrative "Bin" feature is affected by broken access control. A user with low privileges is able to navigate directly to the bin, revealing all deleted spaces. The user can then restore or permanently delete the spaces.