CVE-2016-7999

HIGH

SPIP < 3.1.2 - Server-Side Request Forgery via var_url Parameter

Title source: llm
STIX 2.1

Description

ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to conduct server side request forgery (SSRF) attacks via a URL in the var_url parameter in a valider_xml action.

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/93451
Issue Tracking, Patch, Vendor Advisory x_refsource_confirm
https://core.spip.net/projects/spip/repository/revisions/23193
Issue Tracking, Patch, Vendor Advisory x_refsource_confirm
https://core.spip.net/projects/spip/repository/revisions/23188
Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2016/10/07/5
Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2016/10/08/6
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2016/10/05/17
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2016/10/12/10

Scores

CVSS v3 7.4
EPSS 0.0230
EPSS Percentile 81.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

Details

CWE
CWE-918
Status published
Products (1)
spip/spip < 3.1.2
Published Jan 18, 2017
Tracked Since Feb 18, 2026