~ / search / GHSA-qv8h-rqr3-mph9

GHSA-qv8h-rqr3-mph9

Silverpeas mishandles the "Personal space" feature that is selected when no componentId is set

Source: GitHub Advisory Database (reviewed) Moderate CVE-2026-53698

Packages

EcosystemPackageAffectedFixed in
Maven org.silverpeas.core:silverpeas-core-war <= 6.4-feature13197 no fix listed
Maven org.silverpeas.core:silverpeas-core <= 6.4-feature13197 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set.

References

External links from the advisory. They lead to third-party sites.