CVE-2024-53619

Publication date 26 November 2024

Last updated 4 March 2025


Ubuntu priority

An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3 allows attackers to execute arbitrary code via uploading a crafted PDF file.

Read the notes from the security team

Status

Package Ubuntu Release Status
spip 24.10 oracular
Needs evaluation
24.04 LTS noble
Needs evaluation
22.04 LTS jammy
Needs evaluation
20.04 LTS focal
Needs evaluation
18.04 LTS bionic
Needs evaluation
16.04 LTS xenial
Needs evaluation

Notes


bruce

As of 2025-02-25 no patch available