vulnerability

Ubuntu: USN-4536-1 (CVE-2019-16393): SPIP vulnerabilities

Severity
6
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:N)
Published
Sep 17, 2019
Added
Sep 25, 2020
Modified
Mar 22, 2023

Description

SPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a %0D, %0A, or %20 character.

Solution

ubuntu-upgrade-spip
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.