tocsin

Debian/spip: critical 9.8

SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to execute arbitrary PHP code by adding content, related to the filtrer_entites function.

Action: Upgrade spip to 3.0.22-1 or later.

Affected

introducedfixedlast affected
03.0.22-1-

Fixed versions

3.0.22-1

Sources

published · modified · JSON