1. CVE-Search
  2. CVE-2019-19830
ID CVE-2019-19830
Summary _core_/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database.
References
Vulnerable Configurations
  • cpe:2.3:a:spip:spip:3.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:spip:spip:3.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:spip:spip:3.2.0:alpha:*:*:*:*:*:*
    cpe:2.3:a:spip:spip:3.2.0:alpha:*:*:*:*:*:*
  • cpe:2.3:a:spip:spip:3.2.0:beta:*:*:*:*:*:*
    cpe:2.3:a:spip:spip:3.2.0:beta:*:*:*:*:*:*
  • cpe:2.3:a:spip:spip:3.2.0:beta2:*:*:*:*:*:*
    cpe:2.3:a:spip:spip:3.2.0:beta2:*:*:*:*:*:*
  • cpe:2.3:a:spip:spip:3.2.0:beta3:*:*:*:*:*:*
    cpe:2.3:a:spip:spip:3.2.0:beta3:*:*:*:*:*:*
  • cpe:2.3:a:spip:spip:3.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:spip:spip:3.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:spip:spip:3.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:spip:spip:3.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:spip:spip:3.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:spip:spip:3.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:spip:spip:3.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:spip:spip:3.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:spip:spip:3.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:spip:spip:3.2.5:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
CVSS
Base: 4.0 (as of 03-05-2022 - 14:28)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:L/Au:S/C:N/I:P/A:N
refmap via4
debian DSA-4583
misc
ubuntu USN-4536-1
Last major update 03-05-2022 - 14:28
Published 17-12-2019 - 05:15
Last modified 03-05-2022 - 14:28
Back to Top