CVE-2024-42849 is a denial of service vulnerability affecting Silverpeas versions 6.4.2 and below. It allows a remote attacker with low privileges (PR:L) and no user interaction (UI:N) to cause resource exhaustion or service disruption through the password change functionality. The CVSS 3.1 base score is 6.5, reflecting medium severity with network attack vector and low attack complexity. The vulnerability does not impact confidentiality or integrity but affects availability.

An attacker can cause a denial of service condition remotely by exploiting the password change function, potentially disrupting service availability. There is no impact on data confidentiality or integrity. No known exploits have been reported in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the password change function to trusted users or monitoring for unusual activity related to password changes.