Directory Traversal Vulnerability in SPIP by SPIP Team
CVE-2016-7982
7.5HIGH
Summary
A directory traversal vulnerability exists in ecrire/exec/valider_xml.php of SPIP versions 3.1.2 and earlier. This flaw allows remote attackers to exploit the var_url parameter in a valider_xml action to enumerate files on the server. By manipulating this parameter, an attacker can gain access to sensitive information stored on the system, increasing the risk of further attacks. Website owners using affected versions of SPIP should consider upgrading to mitigate potential security risks.
References
EPSS Score
32% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved