Description
Multiple unspecified vulnerabilities in SPIP before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x before 2.1.13 have unknown impact and attack vectors that are not related to cross-site scripting (XSS), different vulnerabilities than CVE-2012-2151.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | spip | 2.1.13-1 | — |
| Debian 13 | spip | 2.1.13-1 | — |
| Debian 6.0 | spip | 2.1.1-3squeeze3 | DSA-2461-1 |
Advisories 1
- DSA-2461-1 spip - several Debian Security (DSA / DLA) · Mar 9, 2026
References
- 1026970 vdb-entry
- [Spip-en] 20120423 New stable releases SPIP 1.9.2o, 2.0.18 et 2.1.13 are availables mailing-list