2022-12-13 00:00:00
mitre
PUBLISHED
RCE in SPIP 3.1.13 through 4.1.2 allows remote authenticated users to execute arbitrary code via the _oups parameter.