-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability description explicitly implicates the 'userModify' feature as the attack vector. In Java web applications following REST conventions, user modification endpoints would typically be handled by a controller method like userModify in a UserResource class. The absence of CSRF protection in this critical administrative function matches the described attack pattern where state-changing requests can be forged without token validation. While exact code isn't available, the combination of the vulnerability mechanics and Silverpeas's architecture strongly suggests this endpoint implementation is the vulnerable component.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.silverpeas.core:silverpeas-core-web | maven | < 6.3.2 | 6.3.2 |
JavaJavaOngoing coverage of React2Shell