Unscored DLA-2949-1 2 CVEs

spip - security update

Published Mar 15, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	spip	3.1.4-4~deb9u5

Vulnerabilities 2

Unscored —

CVE-2022-26846

SPIP before 3.2.14 and 4.x before 4.0.5 allows remote authenticated editors to execute arbitrary code.

spip spip Debian Ubuntu

Mar 10, 2022
Unscored —

CVE-2022-26847

SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects.

spip spip Debian Ubuntu

Mar 10, 2022