CVE-2023-47327
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
The 'Create a Space' feature in Silverpeas Core 6.3.1 is reserved for administrators but suffers from broken access control, allowing any authenticated user to create a space by navigating to the correct URL.
Risk Assessment
The risk is that unauthorized users can create spaces, potentially leading to uncontrolled organizational structure growth, data leakage, or abuse.
Recommendation
It is recommended to immediately update Silverpeas Core to the latest version and implement access control fixes so that the 'Create a Space' feature is restricted to administrators only.
Original NVD description (English source)
The "Create a Space" feature in Silverpeas Core 6.3.1 is reserved for use by administrators. This function suffers from broken access control, allowing any authenticated user to create a space by navigating to the correct URL.