← Back

CVE-2026-33549

nvd nist
Published: Mar 22, 2026Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator privileges) during the editing of an author data structure because of STATUT mishandling.

Affected (1)

Products: Spip: Spip
Spip
1 product
Spip
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Spip
From 4.4.10 to 4.4.13

Related CWEs

CWE-688
Function Call With Incorrect Variable or Reference as Argument
The product calls a function, procedure, or routine, but the caller specifies the wrong variable or reference as one of the arguments, which may lead to undefined behavior and resultant weaknesses.

References (3)

Source: cve@mitre.org
PatchRelease Notes
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Issue TrackingPatch

Timeline

No history available yet.