CVE-2013-4555

EPSS 0.23%

spip - several

Published: 11/18/2013Modified: 5/29/2026

Also known as:DEBIAN-CVE-2013-4555

Description

Cross-site request forgery (CSRF) vulnerability in ecrire/action/logout.php in SPIP before 2.1.24 allows remote attackers to hijack the authentication of arbitrary users for requests that logout the user via unspecified vectors.

Affected packages (2)

Debian/spipfrom 0, < 2.1.24-1
Debian/spipfrom 0, < 2.1.1-3squeeze7

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2013-4555