https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 18:55:08 +0000 https://vulnerability.circl.lu/vuln/certfr-2025-avi-0043 certfr-2025-avi-0043 https://vulnerability.circl.lu/vuln/certfr-2025-avi-0043 https://vulnerability.circl.lu/vuln/fkie_cve-2025-71242 <p>SPIP before 4.3.6, 4.2.17, and 4.1.20 allows unauthorized content disclosure in the private area. The application does not properly check authorization when displaying content of articles and sections (rubriques) in AJAX-loaded fragments, allowing an authenticated attacker to access restricted content. This vulnerability is not mitigated by the SPIP security screen.</p> <p>SPIP before 4.3.6, 4.2.17, and 4.1.20 allows unauthorized content disclosure in the private area. The application does not properly check authorization when displaying content of articles and sections (rubriques) in AJAX-loaded fragments, allowing an authenticated attacker to access restricted content. This vulnerability is not mitigated by the SPIP security screen.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2025-71242 https://vulnerability.circl.lu/vuln/ghsa-cgwr-5223-r4pg <p>SPIP before 4.3.6, 4.2.17, and 4.1.20 allows unauthorized content disclosure in the private area. The application does not properly check authorization when displaying content of articles and sections (rubriques) in AJAX-loaded fragments, allowing an authenticated attacker to access restricted content. This vulnerability is not mitigated by the SPIP security screen.</p> <p>SPIP before 4.3.6, 4.2.17, and 4.1.20 allows unauthorized content disclosure in the private area. The application does not properly check authorization when displaying content of articles and sections (rubriques) in AJAX-loaded fragments, allowing an authenticated attacker to access restricted content. This vulnerability is not mitigated by the SPIP security screen.</p> https://vulnerability.circl.lu/vuln/ghsa-cgwr-5223-r4pg https://vulnerability.circl.lu/vuln/ubuntu-cve-2025-71242 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: spip, Ubuntu:Pro:18.04:LTS: spip, Ubuntu:Pro:20.04:LTS: spip, Ubuntu:22.04:LTS: spip, Ubuntu:24.04:LTS: spip</p> <p>SPIP before 4.3.6, 4.2.17, and 4.1.20 allows unauthorized content disclosure in the private area. The application does not properly check authorization when displaying content of articles and sections (rubriques) in AJAX-loaded fragments, allowing an authenticated attacker to access restricted content. This vulnerability is not mitigated by the SPIP security screen.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: spip, Ubuntu:Pro:18.04:LTS: spip, Ubuntu:Pro:20.04:LTS: spip, Ubuntu:22.04:LTS: spip, Ubuntu:24.04:LTS: spip</p> <p>SPIP before 4.3.6, 4.2.17, and 4.1.20 allows unauthorized content disclosure in the private area. The application does not properly check authorization when displaying content of articles and sections (rubriques) in AJAX-loaded fragments, allowing an authenticated attacker to access restricted content. This vulnerability is not mitigated by the SPIP security screen.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2025-71242