Skip to content
OpenAdvisories
Unscored DSA-5093-1 2 CVEs

spip - security update

Published Mar 8, 2022 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 10 spip 3.2.4-1+deb10u7
Debian · 11 spip 3.2.11-3+deb11u3

Vulnerabilities 2

  • Unscored —

    SPIP before 3.2.14 and 4.x before 4.0.5 allows remote authenticated editors to execute arbitrary code.

  • Unscored —

    SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects.