CVE-2023-47325

Silverpeas Core 6.3.1 administrative "Bin" feature is affected by broken access control. A user with low privileges is able to navigate directly to the bin, revealing all deleted spaces. The user can then restore or permanently delete the spaces.

• CWE-284

• https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47325Exploit, Third Party Advisory
• https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2023-47325Exploit, Third Party Advisory

Published

Dec 13, 2023

Last Modified

Jul 9, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-4732A flaw was found in pfn_swap_entry_to_page in memory managem…4.7
• CVE-2023-47320Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Cont…8.1
• CVE-2023-47321Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Cont…4.9
• CVE-2023-47322The "userModify" feature of Silverpeas Core 6.3.1 is vulnera…8.8
• CVE-2023-47323The notification/messaging feature of Silverpeas Core 6.3.1 …7.5
• CVE-2023-47324Silverpeas Core 6.3.1 is vulnerable to Cross Site Scripting …5.4
• CVE-2023-47326Silverpeas Core 6.3.1 is vulnerable to Cross Site Request Fo…8.8
• CVE-2023-47327The "Create a Space" feature in Silverpeas Core 6.3.1 is res…4.3
• CVE-2023-4733Use After Free in GitHub repository vim/vim prior to 9.0.184…7.8
• CVE-2023-47335Insecure permissions in the setNFZEnable function of Autel R…6.5
• CVE-2023-4734Integer Overflow or Wraparound in GitHub repository vim/vim …7.8
• CVE-2023-47345Buffer Overflow vulnerability in free5gc 3.3.0 allows attack…7.5