Security Advisory
CVE-2019-16393
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a %0D, %0A, or %20 character.