Lucene search
HistoryJan 04, 2024 - 7:15 a.m.
CVE-2023-52322
cve-2023-52322
spip
xss
vulnerability
input restriction
alphanumerics
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
20.8%
ecrire/public/assembler.php in SPIP before 4.1.13 and 4.2.x before 4.2.7 allows XSS because input from _request() is not restricted to safe characters such as alphanumerics.
Affected configurations
Node
spipspipRange<4.1.13
ORspipspipRange4.2.0–4.2.7
Related
cvelist
cvelist
CVE-2023-52322
2024-01-04 00:00:00
prion
prion
Design/Logic Flaw
2024-01-04 07:15:00
ubuntucve
ubuntucve
CVE-2023-52322
2024-01-04 00:00:00
osv
osv
spip - security update
2024-03-15 00:00:00
CVE-2023-52322
2024-01-04 07:15:09
nessus
nessus
Debian dla-3761 : spip - security update
2024-03-15 00:00:00
cve
cve
CVE-2023-52322
2024-01-04 07:15:09
veracode
veracode
Cross Site Scripting(XSS)
2024-01-13 19:37:27
debian
debian
[SECURITY] [DLA 3761-1] spip security update
2024-03-15 14:54:26
openvas
openvas
SPIP < 4.1.13, 4.2.x < 4.2.7 XSS Vulnerability
2024-01-09 00:00:00
Debian: Security Advisory (DLA-3761-1)
2024-03-18 00:00:00
debiancve
debiancve
CVE-2023-52322
2024-01-04 07:15:09
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
20.8%
Related for NVD:CVE-2023-52322