Skip to content

Silverpeas vulnerable to password complexity rule bypass

Low severity GitHub Reviewed Published Aug 16, 2024 to the GitHub Advisory Database • Updated Aug 19, 2024

Package

maven org.silverpeas.core:silverpeas-core (Maven)

Affected versions

<= 6.4.2

Patched versions

None

Description

An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.

References

Published by the National Vulnerability Database Aug 16, 2024
Published to the GitHub Advisory Database Aug 16, 2024
Reviewed Aug 19, 2024
Last updated Aug 19, 2024

Severity

Low

Weaknesses

CVE ID

CVE-2024-42850

GHSA ID

GHSA-h6jq-w432-j26w
Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.