CVE-2024-42850

Published: Aug 16, 2024
Updated: Jun 6, 2025
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2024-42850" target="_blank" rel="noopener"> CVE-2024-42850
GHSA: <a href="https://github.com/advisories/GHSA-h6jq-w432-j26w" target="_blank" rel="noopener"> GHSA-h6jq-w432-j26w
Severity: Low
Exploit:

An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.

CVSS v3:

CWEs:

Software	From	Fixed in
org.silverpeas.core / silverpeas-core	-	6.4.2.x
silverpeas / silverpeas	-	6.4.2.x

Vulnerability Database