High severity7.5NVD Advisory· Published Jan 3, 2025· Updated Jun 17, 2026
CVE-2024-48814
CVE-2024-48814
Description
SQL Injection vulnerability in Silverpeas 6.4.1 allows a remote attacker to obtain sensitive information via the ViewType parameter of the findbywhereclause function
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:silverpeas:silverpeas:6.4.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:silverpeas:silverpeas:6.4.1:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <6.4.1
Patches
Vulnerability mechanics
References
3- github.com/Silverpeas/Silverpeas-Components/pull/859nvdIssue TrackingPatch
- github.com/Silverpeas/Silverpeas-Core/pull/1353nvdIssue TrackingPatch
- gist.github.com/SubZ3r0-0x01/7150f7cbc3b7d810adb221cae3d08fc8nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.