Skip to content
OpenAdvisories

Package · Ubuntu

spip

62 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-27472 Public exploit

    SPIP < 4.4.9 Blind Server-Side Request Forgery via Syndicated Sites

    SPIP before 4.4.9 allows Blind Server-Side Request Forgery (SSRF) via syndicated sites in the private area. When editing a syndicated site, the application does not verify that the syndication URL is a valid remote URL, allowing an authenticated attacker to m…

    SPIP SPIP spip spip Debian Ubuntu
  • Medium 6.1
    CVE-2024-23659 Public exploit

    SPIP before 4.1.14 and 4.2.x before 4.2.8 allows XSS via the name of an uploaded file. This is related to javascript/bi…

    spip spip Debian Ubuntu