CVE-2024-42850

Critical · CVSS 9.8

Silverpeas — Weak Password Requirements / Password Complexity Bypass (CWE-521)

CVSS: 9.8; nvd
EPSS: —
KEV: No
Class: oss containerizable; CWE-521

Description

An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.

Search profile — drives PoC discovery

Symbols silverpeas-coreorg.silverpeas.corepassword change functionpassword complexitychangePasswordPasswordCheckPasswordRules

Keywords CVE-2024-42850Silverpeaspassword complexity bypasspassword change bypasssilverpeas-coreSilverpeas v6.4.2CWE-521weak password requirementssilverpeas password policy

Versions: <= 6.4.2

Ranked PoCs (1) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

njmbb8/CVE-2024-42850 needs review

cited in references

gh_search

★ 1

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

Affected packages

Maven

org.silverpeas.core:silverpeas-core

0 → ∞

References

https://github.com/njmbb8/CVE-2024-42850

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-06T00:30:39.000Z