CVE-2023-24258

Опубликовано: 27 фев. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*

Версия до 4.1.5 (включая)

EPSS

Процентиль: 73%

0.00745

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVE-2023-24258

CVSS3: 9.8

ubuntu

почти 3 года назад

SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request.

CVE-2023-24258

CVSS3: 9.8

debian

почти 3 года назад

SPIP v4.1.5 and earlier was discovered to contain a SQL injection vuln ...

GHSA-9xqm-m59j-x893

CVSS3: 9.8

github

почти 3 года назад

SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request.

EPSS

Процентиль: 73%

0.00745

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89