{"id":"GHSA-qv8h-rqr3-mph9","summary":"Silverpeas mishandles the \"Personal space\" feature that is selected when no componentId is set","details":"Silverpeas through 6.4.6 mishandles the \"Personal space\" feature that is selected when no componentId is set.","aliases":["CVE-2026-53698"],"modified":"2026-08-17T22:11:01.708745Z","published":"2026-06-10T18:31:46Z","database_specific":{"severity":"MODERATE","github_reviewed":true,"github_reviewed_at":"2026-08-17T21:54:54Z","nvd_published_at":"2026-06-10T16:17:17Z","cwe_ids":["CWE-36"]},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53698"},{"type":"WEB","url":"https://github.com/Silverpeas/Silverpeas-Core/commit/caa6e6d1ac967ebd29b39e11c2ef5e7fd0047eec"},{"type":"PACKAGE","url":"https://github.com/Silverpeas/Silverpeas-Core"},{"type":"WEB","url":"https://github.com/Silverpeas/Silverpeas-Core/blob/983c5d07928b8a5ddcb39cc17d7fb9a0d87019b9/core-war/src/main/java/org/silverpeas/web/servlets/FileServer.java#L120-L122"},{"type":"WEB","url":"https://github.com/Silverpeas/Silverpeas-Core/blob/983c5d07928b8a5ddcb39cc17d7fb9a0d87019b9/core-war/src/main/java/org/silverpeas/web/servlets/FileServer.java#L150-L153"},{"type":"WEB","url":"https://github.com/Silverpeas/Silverpeas-Core/releases/tag/6.4.7"},{"type":"WEB","url":"https://tracker.silverpeas.org/issues/15229"}],"affected":[{"package":{"name":"org.silverpeas.core:silverpeas-core-war","ecosystem":"Maven","purl":"pkg:maven/org.silverpeas.core/silverpeas-core-war"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.4-feature13197"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-qv8h-rqr3-mph9/GHSA-qv8h-rqr3-mph9.json"}},{"package":{"name":"org.silverpeas.core:silverpeas-core","ecosystem":"Maven","purl":"pkg:maven/org.silverpeas.core/silverpeas-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.4-feature13197"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-qv8h-rqr3-mph9/GHSA-qv8h-rqr3-mph9.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}]}