https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T08:06:38.844244+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-335023 EUVD-2026-335023 2026-10-07T08:06:38.846974+00:00 EUVD-2026-335023 https://cve.radiocsirt.org/vuln/fkie_cve-2023-47323 fkie_cve-2023-47323 2026-10-07T08:06:38.847021+00:00

The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter. This allows an attacker to read all messages sent between other users; including those sent only to administrators.

 https://cve.radiocsirt.org/vuln/ghsa-cwh6-hm53-6w2m GHSA-cwh6-hm53-6w2m — Missing access control in Silverpeas 2026-10-07T08:06:38.847071+00:00

Affected: Maven: org.silverpeas.core:silverpeas-core-api, Maven: org.silverpeas.core:silverpeas-core-web

The notification/messaging feature of Silverpeas Core 6.3.1 does not enforce access control on the ID parameter. This allows an attacker to read all messages sent between other users; including those sent only to administrators.

 https://cve.radiocsirt.org/vuln/gsd-2023-47323 gsd-2023-47323 2026-10-07T08:06:38.847126+00:00 gsd-2023-47323