SPIP 4.0.0 is affected by a remote command execution vulnerability
published January 26, 2022
CVSS
—
EPSS
2%
Percentile
83.9
In the wild
Unconfirmed
What it is
SPIP 4.0.0 is affected by a remote command execution vulnerability. To exploit the vulnerability, an attacker must craft a malicious picture with a double extension, upload it and then click on it to execute it.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02396 · 83.9th percentile
Published
2022-01-26T11:57Z
EPSS history
Timeline
26 JAN 11:57Z
SPIP 4.0.0 is affected by a remote command execution vulnerability