PT-2022-11997 · Spip+2 · Spip+2

Published 2021-12-22 · Updated 2023-03-02 · CVE-2021-44122

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SPIP version 4.0.0

Description The issue is related to a Cross Site Request Forgery (CSRF) vulnerability in files such as ecrire/public/aiguiller.php, ecrire/public/balises.php, and ecrire/balise/formulaire .php. To exploit this, a visitor must first visit a malicious website that redirects to the SPIP website. Additionally, it is possible to combine this with XSS vulnerabilities in SPIP 4.0.0 to achieve exploitation. This allows an authenticated attacker to execute malicious code on the website without the user's knowledge.

Recommendations For SPIP version 4.0.0, consider disabling access to the vulnerable files ecrire/public/aiguiller.php, ecrire/public/balises.php, and ecrire/balise/formulaire .php until a patch is available. Restricting the use of these files can help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2021-44122

DLA-2867-1

DSA-5028-1

USN-5482-1

USN-5482-2

Affected Products

Linuxmint

Spip

Ubuntu

References · 21

• https://osv.dev/vulnerability/DEBIAN-CVE-2021-44122 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-44122 · Security Note
• https://ubuntu.com/security/notices/USN-5482-2 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2867-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-44122 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-28984 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-44120 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5482-1 · Vendor Advisory
• https://git.spip.net/spip/spip/commit/1b8e4f404c2441c15ca6540b9a6d8e50cff219db · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5028-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-44122 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5482-2 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5482-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-26847 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-44122 · Vendor Advisory