Описание
The 'Saisies pour formulaire' (Saisies) plugin for SPIP versions 5.4.0 through 5.11.0 contains a critical Remote Code Execution (RCE) vulnerability. An attacker can exploit this vulnerability to execute arbitrary code on the server. Users should immediately update to version 5.11.1 or later.
Ссылки
- Vendor Advisory
- Product
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 5.4.0 (включая) до 5.11.1 (исключая)
cpe:2.3:a:spip:saisies:*:*:*:*:*:spip:*:*
EPSS
Процентиль: 92%
0.05126
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-94
Связанные уязвимости
CVSS3: 9.8
github
7 месяцев назад
The 'Saisies pour formulaire' (Saisies) plugin for SPIP versions 5.4.0 through 5.11.0 contains a critical Remote Code Execution (RCE) vulnerability. An attacker can exploit this vulnerability to execute arbitrary code on the server. Users should immediately update to version 5.11.1 or later.
EPSS
Процентиль: 92%
0.05126
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-94