Cross Site Scripting Vulnerability in Silverpeas Core

CVE-2024-29392

What is CVE-2024-29392?

Silverpeas Core version 6.3 contains a vulnerability that permits exploitation through Cross Site Scripting (XSS). This flaw is specifically found in the ClipboardSessionController component, which may allow attackers to inject malicious scripts into web applications. Such an attack can lead to unauthorized access to sensitive user data, session hijacking, and other security breaches, impacting both the integrity and confidentiality of the application. It is imperative for organizations using Silverpeas Core to assess their exposure to this vulnerability and apply necessary mitigations.

References