by Kastro
Paper/Archive/CVE-2024-8517

CVE-2024-8517

SPIP SPIP — SPIP Bigup Multipart File Upload OS Command Injection

EPSS 95%public exploitCVSS 9.8
critical.is priorityof 100
59
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 99.9.999 × 2020.0Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request.

Affected

ProductAffectedFixed inSource
SPIP4.3.0 – 4.3.1–CNA
SPIP4.2.0 – 4.2.15–CNA
SPIP4.1.0 – < 4.1.184.1.18CNA
spip4.3.0 – 4.3.1–CISA-ADP
spip4.2.0 – 4.2.15–CISA-ADP
spip< 4.1.184.1.18CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitthinkloveshare.com/hacking/spip_preauth_rce_2024_part_2_a_big_uploadadvisoryblog.spip.net/Mise-a-jour-critique-de-securite-sortie-de-SPIP-4-3-2-SPIP-4-2-16-SPIP-4-1-18.htmlwriteupvulncheck.com/advisories/spip-upload-rceexploitvozec.fr/researchs/spip-preauth-rce-2024-big-upload