CVE-2026-53698
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
Silverpeas through 6.4.6 mishandles the 'Personal space' feature when no componentId is set.
Risk Assessment
Improper handling of this feature may lead to unauthorized access to user data, posing a significant security risk to the organization.
Recommendation
It is recommended to update Silverpeas to the latest version to fix this vulnerability and ensure proper handling of the 'Personal space' feature.
Other vulnerabilities in Silverpeas
See all- CVE-2024-42850Critical
In Silverpeas version 6.4.2 and lower, the password change function does not enforce password complexity requirements, allowing weak passwords to be set.
- CVE-2024-42849Medium
An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service (DoS) via the password change function.
Original NVD description (English source)
Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set.