CVE-2026-53698

Description

Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set.

PUBLISHED Reserved 2026-06-10 | Published 2026-06-10 | Updated 2026-06-10 | Assigner mitre

Problem types

CWE-36 Absolute Path Traversal

Product status

References

github.com/...ommit/caa6e6d1ac967ebd29b39e11c2ef5e7fd0047eec

tracker.silverpeas.org/issues/15229

github.com/...va/org/silverpeas/web/servlets/FileServer.java

github.com/...va/org/silverpeas/web/servlets/FileServer.java

cve.org (CVE-2026-53698)

nvd.nist.gov (CVE-2026-53698)

Download JSON