CVE-2023-52322: XSS
Published Jan 4, 2024
·Updated
ecrire/public/assembler.php in SPIP before 4.1.13 and 4.2.x before 4.2.7 allows XSS because input from request() is not restricted to safe characters such as alphanumerics.
Affected Software
2 affected components
Spip SPIP<4.1.13
Spip SPIP>=4.2.0<4.2.7
Remediation
Event History
Jan 4, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-52322?
CVE-2023-52322 is classified as a medium severity vulnerability due to its potential for XSS attacks.
2
How do I fix CVE-2023-52322?
To fix CVE-2023-52322, update your SPIP installation to version 4.1.13 or 4.2.7 or later.
3
What software versions are affected by CVE-2023-52322?
CVE-2023-52322 affects SPIP versions prior to 4.1.13 and versions 4.2.0 through 4.2.6.
4
How does CVE-2023-52322 allow XSS attacks?
CVE-2023-52322 allows XSS attacks because the input from _request() is not properly restricted to safe characters.
5
What are the implications of CVE-2023-52322 on web applications?
The implications of CVE-2023-52322 include exposing web applications to potential cross-site scripting vulnerabilities.