Skip to content
OpenAdvisories

Vendor

SPIP

34 known vulnerabilities.

Products

SPIP 27 interface_traduction_objets 2 referer_spam 1 tickets 1 SPIP Crayons Plugin 1 jeux 1 Saisies pour formulaire 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-27472 Public exploit

    SPIP < 4.4.9 Blind Server-Side Request Forgery via Syndicated Sites

    SPIP before 4.4.9 allows Blind Server-Side Request Forgery (SSRF) via syndicated sites in the private area. When editing a syndicated site, the application does not verify that the syndication URL is a valid remote URL, allowing an authenticated attacker to m…

    SPIP SPIP spip spip Debian Ubuntu