SPIP 4.1.8

CPE Details

SPIP 4.1.8
spip
spip
4.1.8
2023-03-06
12h16 +00:00
2023-03-06
22h18 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:spip:spip:4.1.8:*:*:*:*:*:*:*

Informations

Vendor

spip

Product

spip

Version

4.1.8

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2024-8517 2024-09-06 15h55 +00:00 SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request.
9.8
Critique
CVE-2024-23659 2024-01-18 23h00 +00:00 SPIP before 4.1.14 and 4.2.x before 4.2.8 allows XSS via the name of an uploaded file. This is related to javascript/bigup.js and javascript/bigup.utils.js.
6.1
Moyen
CVE-2023-52322 2024-01-03 23h00 +00:00 ecrire/public/assembler.php in SPIP before 4.1.13 and 4.2.x before 4.2.7 allows XSS because input from _request() is not restricted to safe characters such as alphanumerics.
6.1
Moyen