SPIP Password Change IDOR Privilege Escalation

SPIP before 4.4.23 has a missing authorization check in the motdepasse CVT form handler. The traiter function changes any user's password when given a validly-signed form POST, without verifying the caller is authorized for that idauteur. An authenticated user injects a SPIP model tag into a foru...