CVE-2012-4331 Multiple unspecified vulnerabilities in SPIP before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x before 2.1.13 have unknown impact and attack vectors that are not related to cross-site scripting (XSS), dif...
HighCVSS 10.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in SPIP before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x before 2.1.13 have unknown impact and attack vectors that are not related to cross-site scripting (XSS), different vulnerabilities than CVE-2012-2151.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/spip(Debian:13) | < 2.1.13-1 | 2.1.13-1 |
| debian/spip(Debian:14) | < 2.1.13-1 | 2.1.13-1 |
| SPIP | = 1.9 | No fix listed |
| SPIP | = 1.9.1 | No fix listed |
| SPIP | = 1.9.2 | No fix listed |
| SPIP | = 2.0 | No fix listed |
| SPIP | = 2.1 | No fix listed |
References
- Debian Security Tracker CVE-2012-4331 vendor-advisory
- [Spip-en] 20120423 New stable releases SPIP 1.9.2o, 2.0.18 et 2.1.13 are availables mailing-list
- 1026970 vdb-entry