-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe PoC demonstrates exploitation via direct navigation to /RjobStartPagePeas/jsp/ViewBin. In Java web applications, JSPs are either protected by security constraints in web.xml or programmatic checks in controllers. The vulnerability indicates missing authorization enforcement at the entry point handling this URL. While the exact class/method isn't visible in provided data, the JSP endpoint itself represents the vulnerable access point. This matches the CWE-284 pattern of missing access control on a sensitive functionality endpoint.
JavaJava| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.silverpeas.core:silverpeas-core-web | maven | < 6.3.2 | 6.3.2 |
Ongoing coverage of React2Shell