CVE-2023-27372criticalexplotación observadaCWE-502

CVE-2023-27372

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear spip

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

100Vexday Risk Score

Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.

ssvc Actcvss 9.8epss 100%
de la publicación al arma111 días
Publicada en NVD28 feb
1ª PoC+111d
metasploit27 feb
VulnCheck+64d
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
n/a · n/a
PoCs públicas encontradas — 32✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/51536githubgithub.com/nuts7/CVE-2023-27372★ 69githubgithub.com/Chocapikk/CVE-2023-27372★ 9githubgithub.com/0SPwn/CVE-2023-27372-PoC★ 6githubgithub.com/Ap0dexMe0/CVE-2023-27372★ 3githubgithub.com/izzz0/CVE-2023-27372-POC★ 2githubgithub.com/1Ronkkeli/spip-cve-2023-27372-rce★ 2githubgithub.com/estebanzarate/CVE-2023-27372-SPIP-4.2.1-Unauthenticated-RCE-PoC★ 1githubgithub.com/G01d3nW01f/cve-2023-27372★ 0githubgithub.com/redboltsec/CVE-2023-27372-PoC★ 0githubgithub.com/KirolosKhairy/CVE-2023-27372★ 0githubgithub.com/scriniariii/CVE-2023-27372★ 0githubgithub.com/dream434/CVE-2023-27372★ 0githubgithub.com/1amthebest1/CVE-2023-27372★ 0vulncheckvulncheck.com/xdb/04607676aadbno verificadovulncheckvulncheck.com/xdb/3ce4547b4b42no verificadovulncheckvulncheck.com/xdb/81284a3b5750no verificadovulncheckvulncheck.com/xdb/2f302d530f10no verificadovulncheckvulncheck.com/xdb/32c0ec161ef4no verificadovulncheckvulncheck.com/xdb/70071bb09a8bno verificadovulncheckvulncheck.com/xdb/e1f2d4ed2e6bno verificadovulncheckvulncheck.com/xdb/7fb69b769d96no verificadovulncheckvulncheck.com/xdb/b8a19b503bfcno verificadovulncheckvulncheck.com/xdb/5a4ed18cbe25no verificadocve_referencepacketstormsecurity.com/files/173044/SPIP-4.2.1-Remote-Code-Execution.htmlno verificadovulncheckvulncheck.com/xdb/1d2a2d315e48no verificadocve_referencepacketstormsecurity.com/files/171921/SPIP-Remote-Command-Execution.htmlno verificadocve_referencepacketstorm.news/files/id/171921no verificadocve_referencepacketstorm.news/files/id/173044no verificadovulncheckvulncheck.com/xdb/a7444b0210e4no verificadovulncheckvulncheck.com/xdb/ab5928501616no verificadovulncheckvulncheck.com/xdb/268a1b1d077ano verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.