Critical DLA-3347-1 2 CVEs

spip - security update

Published Feb 27, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	spip	3.2.4-1+deb10u10

Vulnerabilities 2

Critical 9.8

CVE-2023-27372 Public exploit Scanner template EPSS 100%

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. …

spip spip Debian Ubuntu

Feb 28, 2023
Unscored —

CVE-2023-24258

SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter. This vulnerabi…

spip spip Debian Ubuntu

Feb 27, 2023