by Kastro
Paper/Archive/CVE-2023-27372

CVE-2023-27372

mitre — SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled.

EPSS 100%public exploitCVSS 9.8
critical.is priorityof 100
59
CVSS 9.8 (NVD, ADP agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 100.01.000 × 2020.0Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refblog.spip.net/Mise-a-jour-critique-de-securite-sortie-de-SPIP-4-2-1-SPIP-4-1-8-SPIP-4-0-10-et.htmlrefgit.spip.net/spip/spip/commit/5aedf49b89415a4df3eb775eee3801a2b4b88266refgit.spip.net/spip/spip/commit/96fbeb38711c6706e62457f2b732a652a04a409dadvisorydebian.org/security/2023/dsa-5367refpacketstormsecurity.com/files/171921/SPIP-Remote-Command-Execution.htmlrefpacketstormsecurity.com/files/173044/SPIP-4.2.1-Remote-Code-Execution.htmlexploitpacketstorm.news/files/id/173044exploitpacketstorm.news/files/id/171921