Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.silverpeas.core/silverpeas-core@6.4.2
purl pkg:maven/org.silverpeas.core/silverpeas-core@6.4.2
Next non-vulnerable version 6.4.3
Latest non-vulnerable version 6.4.3
Risk score 1.9
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-h6jq-w432-j26w
Aliases:
CVE-2024-42850
Silverpeas vulnerable to password complexity rule bypass An issue in the password change function of Silverpeas v6.4.2 and lower allows … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-788m-27g4-cf86
Cross site scripting in Silverpeas Core Stored Cross-Site Scripting (XSS) Vulnerability in the Categorization Option of My Subscriptions Functionality in … CVE-2024-56923