tocsin

Debian/spip: unknown

SPIP before 4.4.18 contains an unauthenticated blind SQL injection vulnerability in the SQL escaping layer that allows unauthenticated attackers to inject arbitrary SQL by supplying a crafted annee pa

Action: Upgrade spip to 4.4.19+dfsg-0+deb13u1 or later.

Affected

introducedfixedlast affected
04.4.19+dfsg-0+deb13u1-

Fixed versions

4.4.19+dfsg-0+deb13u1

Sources

published · modified · JSON