Lucene search

K
osvGoogleOSV:CVE-2017-9736
HistoryJun 17, 2017 - 4:29 p.m.

CVE-2017-9736

2017-06-1716:29:00
Google
osv.dev
4

7.5 High

AI Score

Confidence

Low

0.028 Low

EPSS

Percentile

90.7%

SPIP 3.1.x before 3.1.6 and 3.2.x before Beta 3 does not remove shell metacharacters from the host field, allowing a remote attacker to cause remote code execution.

CPENameOperatorVersion
spipeq3.1.0-alpha
spipeq3.0.0-beta.2

7.5 High

AI Score

Confidence

Low

0.028 Low

EPSS

Percentile

90.7%