Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter. This allows an attacker to read all messages sent between other users; including those sent only to administrators.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Silverpeas 安全漏洞
Vulnerability Description
Silverpeas是一套开源的业务协作平台。该平台包括项目管理、博客、论坛和文档管理等应用程序。 Silverpeas Core 6.3.1版本存在安全漏洞，该漏洞源于notification/messaging 函数不会对 ID 参数强制执行访问控制，使攻击者能够读取其他用户之间发送的所有消息，包括仅发送给管理员的内容。
CVSS Information
N/A
Vulnerability Type
N/A