SPIP Security Update Advisory (CVE-2024-8517)
Overview
An update has been released to address vulnerabilities in SPIP. Users of the affected versions are advised to update to the latest version.
Affected Products
CVE-2024-8517
- SPIP version: 4.1
- SPIP version: 4.2
- SPIP version: 4.3
Resolved Vulnerabilities
Vulnerability that allows an unauthenticated attacker to execute arbitrary operating system commands by sending a crafted, multi-part file upload HTTP request (CVE-2024-8517)
Vulnerability Patches
The following product-specific Vulnerability Patches have been made available in the latest update. If you are using an affected version, Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
CVE-2024-8517
- SPIP version: 4.1.18
- SPIP version: 4.2.16
- SPIP version: 4.3.2
References
[1] CVE-2024-8517 Detail
https://nvd.nist.gov/vuln/detail/CVE-2024-8517
[2] Mise à jour critique de sécurité : sortie de SPIP 4.3.2, SPIP 4.2.16, SPIP 4.1.18