CVE-2013-4555: CSRF
Cross-site request forgery (CSRF) vulnerability in ecrire/action/logout.php in SPIP before 2.1.24 allows remote attackers to hijack the authentication of arbitrary users for requests that logout the user via unspecified vectors.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4555?
CVE-2013-4555 is classified as a moderate severity vulnerability due to its potential for cross-site request forgery attacks.
How do I fix CVE-2013-4555?
To fix CVE-2013-4555, update your SPIP installation to at least version 2.1.24 or any later versions provided.
Which versions of SPIP are affected by CVE-2013-4555?
CVE-2013-4555 affects versions of SPIP prior to 2.1.24, including all versions from 2.0.0 up to 2.1.23.
What impact can CVE-2013-4555 have on my website?
CVE-2013-4555 can allow an attacker to log out authenticated users without their consent, potentially disrupting user sessions.
Is there a workaround for CVE-2013-4555 if I cannot update immediately?
While the best solution is to update, temporarily restricting access to the logout functionality can mitigate the risk of CVE-2013-4555.