Lucene search
MitreCVELIST:CVE-2023-27372HistoryFeb 28, 2023 - 12:00 a.m.
CVE-2023-27372
2023-02-2800:00:00
mitre
www.cve.org
3
spip
remote code execution
vulnerability
serialization
fixed versions
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.
References
packetstormsecurity.com/files/171921/SPIP-Remote-Command-Execution.html
packetstormsecurity.com/files/173044/SPIP-4.2.1-Remote-Code-Execution.html
blog.spip.net/Mise-a-jour-critique-de-securite-sortie-de-SPIP-4-2-1-SPIP-4-1-8-SPIP-4-0-10-et.html
git.spip.net/spip/spip/commit/5aedf49b89415a4df3eb775eee3801a2b4b88266
git.spip.net/spip/spip/commit/96fbeb38711c6706e62457f2b732a652a04a409d
www.debian.org/security/2023/dsa-5367
Related
debian
debian
[SECURITY] [DSA 5367-1] spip security update
2023-03-02 06:19:59
[SECURITY] [DLA 3347-2] spip regression update
2023-03-03 23:04:04
githubexploit
githubexploit
Exploit for Vulnerability in Spip
2023-06-25 19:39:37
Exploit for CVE-2023-27372
2023-07-05 14:41:03
Exploit for CVE-2023-27372
2023-07-11 10:00:04
debiancve
debiancve
CVE-2023-27372
2023-02-28 20:15:10
cve
cve
CVE-2023-27372
2023-02-28 20:15:10
osv
osv
spip - security update
2023-03-02 00:00:00
CVE-2023-27372
2023-02-28 20:15:10
spip - security update
2023-02-27 00:00:00
nvd
nvd
CVE-2023-27372
2023-02-28 20:15:10
saint
saint
SPIP password reset serialization vulnerability
2023-06-23 00:00:00
SPIP password reset serialization vulnerability
2023-06-23 00:00:00
nuclei
nuclei
SPIP - Remote Command Execution
2023-06-21 20:52:22
openvas
openvas
SPIP 3.2.x < 3.2.18, 4.x < 4.0.10, 4.1.x < 4.1.8, 4.2.x < 4.2.1 RCE Vulnerability
2023-03-02 00:00:00
Debian: Security Advisory (DSA-5367-1)
2023-03-03 00:00:00
Debian: Security Advisory (DLA-3347-1)
2023-02-28 00:00:00
prion
prion
Remote code execution
2023-02-28 20:15:00
zdt
zdt
SPIP Remote Command Execution Exploit
2023-04-18 00:00:00
SPIP v4.2.0 - Remote Code Execution (Unauthenticated) Exploit
2023-06-26 00:00:00
nessus
nessus
Debian DSA-5367-1 : spip - security update
2023-03-02 00:00:00
Debian DLA-3347-1 : spip - LTS security update
2023-02-28 00:00:00
ubuntucve
ubuntucve
CVE-2023-27372
2023-02-28 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2023-03-13 05:57:35
packetstorm
packetstorm
SPIP Remote Command Execution
2023-04-18 00:00:00
SPIP 4.2.1 Remote Code Execution
2023-06-21 00:00:00
exploitdb
exploitdb
SPIP v4.2.0 - Remote Code Execution (Unauthenticated)
2023-06-20 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-04-21 18:02:40