Lucene search
Ubuntu.comUB:CVE-2022-37155HistoryDec 14, 2022 - 12:00 a.m.
CVE-2022-37155
2022-12-1400:00:00
ubuntu.com
ubuntu.com
16
spip
remote code execution
authenticated users
_oups parameter
unix
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.007
Percentile
79.9%
RCE in SPIP 3.1.13 through 4.1.2 allows remote authenticated users to
execute arbitrary code via the _oups parameter.
Related
openvas
openvas
SPIP 3.2.x < 3.2.16, 4.x < 4.0.8, 4.1.x < 4.1.5 RCE Vulnerability
2022-12-27 00:00:00
Debian: Security Advisory (DSA-5190-1)
2022-07-27 00:00:00
osv
osv
spip - security update
2022-07-26 00:00:00
CVE-2022-37155
2022-12-14 00:15:09
debiancve
debiancve
CVE-2022-37155
2022-12-14 00:15:09
nvd
nvd
CVE-2022-37155
2022-12-14 00:15:09
cvelist
cvelist
CVE-2022-37155
2022-12-13 00:00:00
prion
prion
Code injection
2022-12-14 00:15:00
veracode
veracode
Arbitrary Code Execution
2023-01-04 04:13:12
cve
cve
CVE-2022-37155
2022-12-14 00:15:09
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.007
Percentile
79.9%
Related for UB:CVE-2022-37155