A vulnerability was found in SPIP up to 4.1.18/4.2.15/4.3.1. It has been rated as very critical. This issue affects an unknown function of the component Multipart File Upload Handler. The manipulation with an unknown input leads to a reliance on file name or extension of externally-supplied file vulnerability. Using CWE to declare the problem leads to CWE-646. The product allows a file to be uploaded, but it relies on the file name or extension of the file to determine the appropriate behaviors. This could be used by attackers to cause the file to be misclassified and processed in a dangerous fashion. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request.

The weakness was released by Louka Jacques-Chevallier. It is possible to read the advisory at thinkloveshare.com. The identification of this vulnerability is CVE-2024-8517 since 09/06/2024. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details are unknown but a public exploit is available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 09/13/2024).

The exploit is available at packetstormsecurity.com. It is declared as highly functional.

Upgrading to version 4.1.18, 4.2.16 or 4.3.2 eliminates this vulnerability.

Entry connected to this vulnerability is available at VDB-278506.

Productinfo

Type

• Content Management System

Name

• SPIP

Version

• 4.1.0
• 4.1.1
• 4.1.2
• 4.1.3
• 4.1.4
• 4.1.5
• 4.1.6
• 4.1.7
• 4.1.8
• 4.1.9
• 4.1.10
• 4.1.11
• 4.1.12
• 4.1.13
• 4.1.14
• 4.1.15
• 4.1.16
• 4.1.17
• 4.1.18
• 4.2.0
• 4.2.1
• 4.2.2
• 4.2.3
• 4.2.4
• 4.2.5
• 4.2.6
• 4.2.7
• 4.2.8
• 4.2.9
• 4.2.10
• 4.2.11
• 4.2.12
• 4.2.13
• 4.2.14
• 4.2.15
• 4.3.0
• 4.3.1

License

• free

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion