writeups.xyz / Silverpeas App: Multiple CVEs leading to File Read on Server

Submitter : c2a

Date: 12 December 2023

Bounty : undisclosed

Vulnerabilities :

• Stored XSS
• Arbitrary File Read

Programs :

• Silverpeas

Authors :

• Tyler Ramsbey (@Tyler_Ramsbey)

Link :
https://rhinosecuritylabs.com/research/silverpeas-file-read-cves/