Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-37155HistoryDec 14, 2022 - 12:15 a.m.
CVE-2022-37155
2022-12-1400:15:09
Debian Security Bug Tracker
security-tracker.debian.org
20
spip
remote code execution
authenticated users
arbitrary code
_oups parameter
unix
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.007
Percentile
79.9%
RCE in SPIP 3.1.13 through 4.1.2 allows remote authenticated users to execute arbitrary code via the _oups parameter.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | spip | < 3.2.11-3+deb11u5 | spip_3.2.11-3+deb11u5_all.deb |
| Debian | 999 | all | spip | < 4.1.5+dfsg-1 | spip_4.1.5+dfsg-1_all.deb |
| Debian | 13 | all | spip | < 4.1.5+dfsg-1 | spip_4.1.5+dfsg-1_all.deb |
Related
openvas
openvas
SPIP 3.2.x < 3.2.16, 4.x < 4.0.8, 4.1.x < 4.1.5 RCE Vulnerability
2022-12-27 00:00:00
Debian: Security Advisory (DSA-5190-1)
2022-07-27 00:00:00
osv
osv
spip - security update
2022-07-26 00:00:00
CVE-2022-37155
2022-12-14 00:15:09
nvd
nvd
CVE-2022-37155
2022-12-14 00:15:09
cvelist
cvelist
CVE-2022-37155
2022-12-13 00:00:00
ubuntucve
ubuntucve
CVE-2022-37155
2022-12-14 00:00:00
prion
prion
Code injection
2022-12-14 00:15:00
veracode
veracode
Arbitrary Code Execution
2023-01-04 04:13:12
cve
cve
CVE-2022-37155
2022-12-14 00:15:09
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.007
Percentile
79.9%
Related for DEBIANCVE:CVE-2022-37155