CVE-2019-16391

Published: Sep 17, 2019

Modified: Aug 5, 2024

PUBLISHED

Description

SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiser_action.php.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://blog.spip.net/Mise-a-jour-CRITIQUE-de-securite-Sortie-de-SPIP-3-2-5-et-SPIP-3-1-11.html

x_refsource_MISC

https://git.spip.net/SPIP/spip/commit/187952ce85e73b52c2753f2d54fc2c44807b8f79

x_refsource_MISC

https://git.spip.net/SPIP/spip/commit/3cbc758400323ab006c00ea78eacdb8f76aa5f66

x_refsource_MISC

20190925 [SECURITY] [DSA 4532-1] spip security update

mailing-list

x_refsource_BUGTRAQ

DSA-4532

vendor-advisory

x_refsource_DEBIAN

https://blog.spip.net/Mise-a-jour-CRITIQUE-de-securite-Sortie-de-SPIP-3-2-5-et-SPIP-3-1-11.html?lang=fr

x_refsource_MISC

[debian-lts-announce] 20191028 [SECURITY] [DLA 1975-1] spip security update

mailing-list

x_refsource_MLIST

USN-4536-1

vendor-advisory

x_refsource_UBUNTU

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2019-16391

Description

Affected Products

References