| Package | Affected versions | Patched versions |
|---|---|---|
| spip | = 4.3.0= 4.3.1≥ 4.0.0, < 4.1.18≥ 4.2.0, ≤ 4.2.15 | 4.1.18 |
SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free