A AegiFlow
MEDIUMCVSS 6.5EPSS 0.3%

CVE-2026-53698

Silverpeas mishandles the "Personal space" feature that is selected when no componentId is set

Published
2026-06-10
Modified
2026-08-17
EPSS percentile
26%
Aliases
GHSA-qv8h-rqr3-mph9
Sources
github-advisory

Summary

Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set.

Affected packages

EcosystemPackageAffected versionsFixed versions
Mavenorg.silverpeas.core:silverpeas-core——
Mavenorg.silverpeas.core:silverpeas-core-war——

Remediation: No patched version is listed by GitHub.

References

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.