PT-2012-5333 · Spip · Spip

Published 2012-08-14 · Updated 2012-08-15 · CVE-2012-4331

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SPIP versions prior to 1.9.2.o SPIP versions 2.0.x prior to 2.0.18 SPIP versions 2.1.x prior to 2.1.13

Description The issue involves multiple unspecified vulnerabilities with unknown impact and attack vectors. These vulnerabilities are not related to cross-site scripting (XSS) and are distinct from other known vulnerabilities.

Recommendations For SPIP versions prior to 1.9.2.o, update to version 1.9.2.o or later. For SPIP versions 2.0.x prior to 2.0.18, update to version 2.0.18 or later. For SPIP versions 2.1.x prior to 2.1.13, update to version 2.1.13 or later.

Fix

Related Identifiers

CVE-2012-4331

DSA-2461-1

Affected Products

Spip

References · 7

• https://osv.dev/vulnerability/DEBIAN-CVE-2012-4331 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-4331 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-4331 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2012-4331 · Vendor Advisory
• http://archives.rezo.net/archives/spip-en.mbox/U5QUZ6WJRAJC7H5BR7W5SQG6WCD3PXL7 · Note
• http://securitytracker.com/id?1026970 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4331 · Note