tocsin

Debian/spip: unknown

SPIP 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23 allows remote attackers to gain privileges and "take editorial control" via vectors related to ecrire/inc/filtres.php.

Action: Upgrade spip to 2.1.22-1 or later.

Affected

introducedfixedlast affected
02.1.22-1-

Fixed versions

2.1.22-1

Sources

published · modified · JSON