{"id":"CVE-2023-24258","aliases":["DEBIAN-CVE-2023-24258","DLA-3347-1","DSA-5325-1","EUVD-2023-28315","GHSA-9xqm-m59j-x893","UBUNTU-CVE-2023-24258","USN-7318-1"],"status":"published","title":"SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups...","description":"SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01578,"percentile":0.75815,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-89"],"published":"2023-01-24T00:00:00Z","modified":"2026-10-26T18:02:23Z","fixes":[{"ecosystem":"Debian:13","package":"spip","fixed_in":["4.1.7+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"spip","fixed_in":["4.1.7+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"spip","fixed_in":["3.2.11-3+deb11u6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"spip","fixed_in":["3.1.4-4~deb9u5ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"spip","fixed_in":["3.2.7-1ubuntu0.1+esm2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:13","package":"spip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.7+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"spip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.7+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"spip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.4-1+deb10u10"}]}],"versions":["3.2.4-1","3.2.4-1+deb10u1","3.2.4-1+deb10u2","3.2.4-1+deb10u3","3.2.4-1+deb10u4","3.2.4-1+deb10u5","3.2.4-1+deb10u6","3.2.4-1+deb10u7","3.2.4-1+deb10u8","3.2.4-1+deb10u9"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"spip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.11-3+deb11u6"}]}],"versions":["3.2.11-3","3.2.11-3+deb11u1","3.2.11-3+deb11u2","3.2.11-3+deb11u3","3.2.11-3+deb11u4","3.2.11-3+deb11u5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"spip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.20-1","3.0.21-1","3.0.21-1ubuntu1","3.0.21-1ubuntu1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"spip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4-4~deb9u5ubuntu0.1~esm2"}]}],"versions":["3.1.4-3","3.1.4-4~deb9u3build0.18.04.1","3.1.4-4~deb9u5build0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"spip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.7-1ubuntu0.1+esm2"}]}],"versions":["3.2.4-1","3.2.5-1","3.2.7-1","3.2.7-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"spip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.11-3","3.2.12-1","4.0.2-1","4.0.4-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"spip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.4-4~deb9u5ubuntu0.1~esm2"}]}],"versions":["3.1.4-3","3.1.4-4~deb9u3build0.18.04.1","3.1.4-4~deb9u5build0.18.04.1"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"spip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.7-1ubuntu0.1+esm2"}]}],"versions":["3.2.4-1","3.2.5-1","3.2.7-1","3.2.7-1ubuntu0.1"],"bundled":8}],"products":[{"vendor":"spip","product":"spip"}],"references":[{"url":"https://github.com/Abyss-W4tcher/ab4yss-wr4iteups/blob/ffa980faa9e3598d49d6fb7def4f7a67cfb5f427/SPIP%20-%20Pentest/SPIP%204.1.5/SPIP_4.1.5_AND_BEFORE_AUTH_SQLi_Abyss_Watcher.md","tags":["x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-1-7-SPIP-4-0-9-et-SPIP-3-2-17.html","tags":["x_transferred","Release Notes","advisory","report"]},{"url":"https://www.debian.org/security/2023/dsa-5325","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24258"},{"url":"https://github.com/advisories/GHSA-9xqm-m59j-x893"},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-24258","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-24258","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24258","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7318-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-23638","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-28959","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-28960","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-28961","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-37155","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-27372","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-8517","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-24258","description":"SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request.","status":"published","published":"2023-02-27T00:00:00Z","modified":"2025-03-11T03:00:35.882Z","updated_at":"2026-11-02T14:35:27.006218Z"}],"euvd":[{"id":"EUVD-2023-28315","description":"SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request.","status":"published","published":"2023-02-27T00:00:00Z","modified":"2025-03-11T03:00:35Z","cvss":[{"version":"","score":0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"none"}],"updated_at":"2026-11-02T20:53:08.182954Z"}],"ghsa":[{"id":"GHSA-9xqm-m59j-x893","title":"SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups...","description":"SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request.","status":"published","published":"2023-02-27T21:30:16Z","modified":"2023-03-25T00:30:27Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:54:23.567838Z"}],"nvd":[{"id":"CVE-2023-24258","description":"SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request.","status":"published","published":"2023-02-27T21:15:11.947Z","modified":"2026-06-17T05:38:56.97Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:07:47.623983Z"}],"osv":[{"id":"CVE-2023-24258","description":"SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request.","status":"published","published":"2023-02-27T21:15:11.947Z","modified":"2026-03-15T14:46:52.042904Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:30.709518Z"},{"id":"DEBIAN-CVE-2023-24258","description":"SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request.","status":"published","published":"2023-02-27T21:15:11.947Z","modified":"2026-10-26T18:02:23.70026491Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:39.369204Z"},{"id":"UBUNTU-CVE-2023-24258","description":"SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request.","status":"published","published":"2023-02-27T21:15:00Z","modified":"2026-04-07T11:15:19.127538Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:54:20.198616Z"},{"id":"DLA-3347-1","title":"spip - security update","status":"published","published":"2023-02-27T00:00:00Z","modified":"2026-03-09T01:18:17.084669Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5325-1","title":"spip - security update","status":"published","published":"2023-01-24T00:00:00Z","modified":"2026-03-09T02:11:36.398853Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"USN-7318-1","title":"spip vulnerabilities","description":"It was discovered that svg-sanitizer, vendored in SPIP, did not properly\nsanitize SVG/XML content. An attacker could possibly use this issue to\nperform cross site scripting. This issue only affected Ubuntu 24.10.\n(CVE-2022-23638)\n\nIt was discovered that SPIP did not properly sanitize certain inputs. A\nremote attacker could possibly use this issue to perform cross site\nscripting. This issue only affected Ubuntu 18.04 LTS. (CVE-2022-28959)\n\nIt was discovered that SPIP did not properly sanitize certain inputs. A\nremote attacker could possibly use this issue to perform PHP injection\nattacks. This issue only affected Ubuntu 18.04 LTS. (CVE-2022-28960)\n\nIt was discovered that SPIP did not properly sanitize certain inputs. A\nremote attacker could possibly use this issue to perform SQL injection\nattacks. This issue only affected Ubuntu 18.04 LTS. (CVE-2022-28961)\n\nIt was discovered that SPIP did not properly sanitize certain inputs. A\nremote authenticated attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2022-37155)\n\nIt was discovered that SPIP did not properly sanitize certain inputs. A\nremote attacker could possibly use this issue to perform SQL injection\nattacks. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.\n(CVE-2023-24258)\n\nIt was discovered that SPIP did not properly handle serialization under\ncertain circumstances. A remote attacker could possibly use this issue to\nexecute arbitrary code. This issue only affected Ubuntu 18.04 LTS and\nUbuntu 20.04 LTS. (CVE-2023-27372)\n\nIt was discovered that SPIP did not properly sanitize HTTP requests. A\nremote attacker could possibly use this issue to execute arbitrary code.\n(CVE-2024-8517)\n","status":"published","published":"2025-03-04T00:21:21Z","modified":"2026-04-27T18:02:20.676823681Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}