6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.4 High
AI Score
Confidence
High
0.022 Low
EPSS
Percentile
89.5%
Package : spip
Version : 2.1.17-1+deb7u6
CVE ID : CVE-2016-7980 CVE-2016-7981 CVE-2016-7982
CVE-2016-7998 CVE-2016-7999
Multiple vulnerabilities have been discovered in SPIP, a website
engine for publishing written in PHP.
CVE-2016-7980
Nicolas Chatelain of Sysdream Labs discovered a cross-site request
forgery (CSRF) vulnerability in the valider_xml action of SPIP. This
allows remote attackers to make use of potential additional
vulnerabilities such as the one described in CVE-2016-7998.
CVE-2016-7981
Nicolas Chatelain of Sysdream Labs discovered a reflected cross-site
scripting attack (XSS) vulnerability in the validater_xml action of
SPIP. An attacker could take advantage of this vulnerability to
inject arbitrary code by tricking an administrator to open a
malicious link.
CVE-2016-7982
Nicolas Chatelain of Sysdream Labs discovered a file enumeration /
path traversal attack in the the validator_xml action of SPIP. An
attacker could use this to enumerate files in an arbitrary directory
on the file system.
CVE-2016-7998
Nicolas Chatelain of Sysdream Labs discovered a possible PHP code
execution vulnerability in the template compiler/composer function
of SPIP. In combination with the XSS and CSRF vulnerabilities
described in this advisory, a remote attacker could take advantage
of this to execute arbitrary PHP code on the server.
CVE-2016-7999
Nicolas Chatelain of Sysdream Labs discovered a server side request
forgery in the valider_xml action of SPIP. Attackers could take
advantage of this vulnerability to send HTTP or FTP requests to
remote servers that they don't have direct access to, possibly
bypassing access controls such as a firewall.
For Debian 7 "Wheezy", these problems have been fixed in version
2.1.17-1+deb7u6.
We recommend that you upgrade your spip packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
Jonas Meurer
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 7 | all | spip | < 2.1.17-1+deb7u6 | spip_2.1.17-1+deb7u6_all.deb |
Debian | 8 | all | spip | < 3.0.17-2+deb8u3 | spip_3.0.17-2+deb8u3_all.deb |
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.4 High
AI Score
Confidence
High
0.022 Low
EPSS
Percentile
89.5%