SPIP up to 4.1.18/4.2.15/4.3.1 Multipart File Upload reliance on file name or extension of externally-supplied file

Summaryinfo

A vulnerability was found in SPIP up to 4.1.18/4.2.15/4.3.1. It has been rated as very critical. This issue affects some unknown processing of the component Multipart File Upload Handler. The manipulation leads to reliance on file name or extension of externally-supplied file. This vulnerability is documented as CVE-2024-8517. The attack can be initiated remotely. Additionally, an exploit exists. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in SPIP up to 4.1.18/4.2.15/4.3.1. It has been rated as very critical. This issue affects an unknown function of the component Multipart File Upload Handler. The manipulation with an unknown input leads to a reliance on file name or extension of externally-supplied file vulnerability. Using CWE to declare the problem leads to CWE-646. The product allows a file to be uploaded, but it relies on the file name or extension of the file to determine the appropriate behaviors. This could be used by attackers to cause the file to be misclassified and processed in a dangerous fashion. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request.

The weakness was released by Louka Jacques-Chevallier. It is possible to read the advisory at thinkloveshare.com. The identification of this vulnerability is CVE-2024-8517 since 09/06/2024. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details are unknown but a public exploit is available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 11/22/2025).

The exploit is available at packetstormsecurity.com. It is declared as highly functional.

Upgrading to version 4.1.18, 4.2.16 or 4.3.2 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2024-49235). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Content Management System

Name

• SPIP

Version

• 4.1.0
• 4.1.1
• 4.1.2
• 4.1.3
• 4.1.4
• 4.1.5
• 4.1.6
• 4.1.7
• 4.1.8
• 4.1.9
• 4.1.10
• 4.1.11
• 4.1.12
• 4.1.13
• 4.1.14
• 4.1.15
• 4.1.16
• 4.1.17
• 4.1.18
• 4.2.0
• 4.2.1
• 4.2.2
• 4.2.3
• 4.2.4
• 4.2.5
• 4.2.6
• 4.2.7
• 4.2.8
• 4.2.9
• 4.2.10
• 4.2.11
• 4.2.12
• 4.2.13
• 4.2.14
• 4.2.15
• 4.3.0
• 4.3.1

License

• free

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion