Логотип exploitDog
bind:CVE-2023-47322
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-47322

Количество 2

Количество 2

nvd логотип

CVE-2023-47322

около 2 лет назад

The "userModify" feature of Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) leading to privilege escalation. If an administrator goes to a malicious URL while being authenticated to the Silverpeas application, the CSRF with execute making the attacker an administrator user in the application.

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-g27c-w2v7-88xp

около 2 лет назад

Cross Site Request Forgery in Silverpeas

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-47322

The "userModify" feature of Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF) leading to privilege escalation. If an administrator goes to a malicious URL while being authenticated to the Silverpeas application, the CSRF with execute making the attacker an administrator user in the application.

CVSS3: 8.8
0%
Низкий
около 2 лет назад
github логотип
GHSA-g27c-w2v7-88xp

Cross Site Request Forgery in Silverpeas

CVSS3: 8.8
0%
Низкий
около 2 лет назад

Уязвимостей на страницу