tocsin

Debian/spip: high 8.8

Cross-site request forgery (CSRF) vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execut

Action: Upgrade spip to 3.1.3-1 or later.

Affected

introducedfixedlast affected
03.1.3-1-

Fixed versions

3.1.3-1

Sources

published · modified · JSON