CVE-2019-16391 in SPIP

Сводка

по MITRE

SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiser_action.php.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Резервировать: 17.09.2019
• Модерация: принято
• Вход: VDB-141917
• CPE: готов
• CWE: CWE-863 (Подтверждённый)
• CVSS: 6.5 (NVD)
• EPSS: 0.01487
• KEV: Нет
• Деятельности: Очень низкий
• Сектор: Lawfirm, Hostingprovider, ...

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-16391
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-16391
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-16391/