Security Advisory
CVE-2023-47323
7.5
HIGH
Vulnerability Description
The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter. This allows an attacker to read all messages sent between other users; including those sent only to administrators.
Published Date
December 13, 2023
Official Source
NIST NVD Advisory