~ / search / GHSA-h6jq-w432-j26w

GHSA-h6jq-w432-j26w

Silverpeas vulnerable to password complexity rule bypass

Source: GitHub Advisory Database (reviewed) Low CVE-2024-42850

Packages

EcosystemPackageAffectedFixed in
Maven org.silverpeas.core:silverpeas-core <= 6.4.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.

References

External links from the advisory. They lead to third-party sites.