CVE-2024-8517
Full vulnerability record from the local CVENow database.
Description
SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request.
Severity
CRITICAL
CVSS score
9.8
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2024-09-06 16:15:03.793000
Last modified
2026-10-29 21:17:03.650000
View original CVE JSON
{
"id": "CVE-2024-8517",
"sourceIdentifier": "[email protected]",
"published": "2024-09-06T16:15:03.793",
"lastModified": "2026-10-29T21:17:03.650",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "SPIP before 4.3.2, 4.2.16, and \n4.1.18 is vulnerable to a command injection issue. A \nremote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request."
},
{
"lang": "es",
"value": "SPIP anterior a 4.3.2, 4.2.16 y 4.1.18 es vulnerable a un problema de inyección de comandos. Un atacante remoto y no autenticado puede ejecutar comandos arbitrarios del sistema operativo enviando una solicitud HTTP de carga de archivo multiparte manipulada."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "SPIP",
"product": "SPIP",
"defaultStatus": "unaffected",
"versions": [
{
"version": "4.3.0",
"lessThanOrEqual": "4.3.1",
"versionType": "semver",
"status": "affected"
},
{
"version": "4.2.0",
"lessThanOrEqual": "4.2.15",
"versionType": "semver",
"status": "affected"
},
{
"version": "4.1.0",
"lessThan": "4.1.18",
"versionType": "semver",
"status": "affected"
}
]
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"affectedData": [
{
"vendor": "spip",
"product": "spip",
"defaultStatus": "unknown",
"cpes": [
"cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*"
],
"versions": [
{
"version": "4.3.0",
"lessThanOrEqual": "4.3.1",
"versionType": "custom",
"status": "affected"
},
{
"version": "4.2.0",
"lessThanOrEqual": "4.2.15",
"versionType": "custom",
"status": "affected"
},
{
"version": "0",
"lessThan": "4.1.18",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2024-09-06T20:29:04.243583Z",
"id": "CVE-2024-8517",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-73"
},
{
"lang": "en",
"value": "CWE-78"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.0.0",
"versionEndExcluding": "4.1.18",
"matchCriteriaId": "E48335D1-94D2-4A75-960D-804C92C246BC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.2.0",
"versionEndIncluding": "4.2.15",
"matchCriteriaId": "B05B0286-ED29-4860-A5A7-FF196A65F066"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:spip:spip:4.3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "ACBB7226-E320-4997-A541-B3EA402C643F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:spip:spip:4.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "425F3BC4-EB81-4BB8-96DB-D26C0154C11B"
}
]
}
]
}
],
"references": [
{
"url": "https://blog.spip.net/Mise-a-jour-critique-de-securite-sortie-de-SPIP-4-3-2-SPIP-4-2-16-SPIP-4-1-18.html",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://thinkloveshare.com/hacking/spip_preauth_rce_2024_part_2_a_big_upload/",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vozec.fr/researchs/spip-preauth-rce-2024-big-upload/",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vulncheck.com/advisories/spip-upload-rce",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}