tocsin

Debian/spip: high 7.5

Directory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to enumerate the files on the system via the var_url parameter in a valider_xml actio

Action: Upgrade spip to 3.1.3-1 or later.

Affected

introducedfixedlast affected
03.1.3-1-

Fixed versions

3.1.3-1

Sources

published · modified · JSON