PT-2022-23844 · Spip+2 · Spip+2

Abyss Watcher + 1 · Published 2022-07-26 · Updated 2025-03-04 · CVE-2022-37155

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SPIP versions 3.1.13 through 4.1.2

Description The issue allows remote authenticated users to execute arbitrary code via the oups parameter. This enables attackers to perform remote code execution (RCE) on affected systems.

Recommendations For SPIP versions 3.1.13 through 4.1.2, consider restricting access to the oups parameter to minimize the risk of exploitation until a patch is available.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2022-37155

DSA-5190-1

USN-7318-1

Affected Products

Linuxmint

Spip

Ubuntu

References · 33

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/spip_rce_form.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/spip_rce_form.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/spip_bigup_unauth_rce.rb · Exploit
• 🔥 https://github.com/nuts7/CVE-2023-27372 · Exploit
• 🔥 https://github.com/Chocapikk/CVE-2024-8517 · Exploit
• 🔥 https://github.com/ThatNotEasy/CVE-2023-27372 · Exploit
• 🔥 https://github.com/Pari-Malam/CVE-2023-27372 · Exploit
• 🔥 https://github.com/RSTG0D/CVE-2023-27372-PoC · Exploit
• 🔥 https://github.com/0SPwn/CVE-2023-27372-PoC · Exploit
• 🔥 https://github.com/Chocapikk/CVE-2023-27372 · Exploit
• 🔥 https://github.com/Abyss-W4tcher/ab4yss-wr4iteups/blob/ffa980faa9e3598d49d6fb7def4f7a67cfb5f427/SPIP%20-%20Pentest/SPIP%204.1.2/SPIP_4.1.2_AUTH_RCE/SPIP_4.1.2_AUTH_RCE_Abyss_Watcher_12_07_22.md · Exploit
• 🔥 https://spawnzii.github.io/posts/2022/07/how-we-have-pwned-root-me-in-2022 · Exploit
• 🔥 https://pastebin.com/ZH7CPc8X · Exploit
• https://ubuntu.com/security/CVE-2022-28959 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-28960 · Vendor Advisory