Описание
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | not-affected | 4.2.11+dfsg-1 |
| esm-apps/bionic | released | 3.1.4-4~deb9u5ubuntu0.1~esm2 |
| esm-apps/focal | released | 3.2.7-1ubuntu0.1+esm2 |
| esm-apps/jammy | needed | |
| esm-apps/noble | not-affected | |
| esm-apps/xenial | needed | |
| focal | ignored | end of standard support, was needed |
| jammy | needed | |
| kinetic | ignored | end of life, was needs-triage |
Показывать по
Ссылки на источники
EPSS
9.8 Critical
CVSS3
Связанные уязвимости
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.
SPIP before 4.2.1 allows Remote Code Execution via form values in the ...
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.
Уязвимость системы управления контентом SPIP, связанная с восстановлением в памяти недостоверных данных , позволяющая нарушителю выполнить произвольный код
EPSS
9.8 Critical
CVSS3