← Back to browse · API

CVE-2023-27372

Severity
CRITICAL
CVSS
9.8
EPSS
0.99637
Risk score
74.07
CISA KEV
No
PoC
No
Published
2023-02-28
Modified
2025-03-11
First seen
2026-08-07
Aliases
EUVD-2023-31148, GHSA-JC3F-VXGP-6JW9
Products
n/a:n/a n/a
Sources
euvd EUVD-2023-31148

Description

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.

References