CVE-2024-36042

9.8CRITICAL

Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often providing an unauthenticated user with superadmin access.

发布于: 6/3/2024更新于: 5/29/2025

描述

Silverpeas before 6.3.5 allows authentication bypass by omitting the Password field to AuthenticationServlet, often providing an unauthenticated user with superadmin access.

AI分析AI驱动

受影响产品

silverpeassilverpeas

参考资料