Описание
SPIP 3.1 before 3.1.10 and 3.2 before 3.2.4 allows authenticated visitors to execute arbitrary code on the host server because var_memotri is mishandled.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 3.1.4-4~deb9u3build0.18.04.1 |
| cosmic | ignored | end of life |
| devel | not-affected | 3.2.4-1 |
| disco | ignored | end of life |
| eoan | not-affected | 3.2.4-1 |
| esm-apps/bionic | released | 3.1.4-4~deb9u3build0.18.04.1 |
| esm-apps/focal | not-affected | 3.2.4-1 |
| esm-apps/xenial | not-affected | code not present |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [code not present]] |
| focal | not-affected | 3.2.4-1 |
Показывать по
Ссылки на источники
EPSS
6.5 Medium
CVSS2
8.8 High
CVSS3
Связанные уязвимости
SPIP 3.1 before 3.1.10 and 3.2 before 3.2.4 allows authenticated visitors to execute arbitrary code on the host server because var_memotri is mishandled.
SPIP 3.1 before 3.1.10 and 3.2 before 3.2.4 allows authenticated visit ...
SPIP 3.1 before 3.1.10 and 3.2 before 3.2.4 allows authenticated visitors to execute arbitrary code on the host server because var_memotri is mishandled.
Уязвимость системы управления контентом SPIP, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю выполнить произвольный код
EPSS
6.5 Medium
CVSS2
8.8 High
CVSS3