Skip to main content
← Maven

org.silverpeas.core:silverpeas-core-api

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
Maven Central

Advisories 2

  • Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting (XSS) via the message/notification feature.

    Affected: fixed in 6.3.2.

  • The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter.

    Affected: fixed in 6.3.2.