VulnSocial

CVE-2023-27372PoC(debian / debian_linux)

MEDIUMCVSS 9.8 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for debian debian_linux systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.

debian CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-502

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • debian_linux
  • spip

Threat summary

  • Public PoC and exploit tooling are both present
  • 1 mentions across 1 observed day

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
debianspip
Products
debian_linuxspip

2 versions affected across 2 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-02-19: 1PoC Mentioned / Linked · 2026-02-19: 1Exploit Tool / Code · 2026-02-19: 1Technical Details · 2026-02-19: 102-19
Signal classification1 categories
PoC
1100.0%
Referenced assets2 URLs
Full discourse1 post
  • Chocapikk 🤘🏻@Chocapikk_
    PoC

    CVE-2025-71243 - SPIP Saisies Plugin RCE Advisory dropped today, PoC ready 30 minutes later. Full AI-assisted reversal from patch diff to confirmed RCE. Same exploitation pattern as CVE-2023-27372 - unsanitized input into SPIP's template engine with interdire_scripts=false. Two years later. Discovery: OpenStudio Writeup: https://chocapikk.com/posts/2026/spip-saisies-rce/ PoC: https://github.com/Chocapikk/CVE-2025-71243

    Post summary

    CVE-2025-71243 is disclosed with a PoC released shortly after, detailing an unsanitized input RCE in SPIP’s template engine, and providing both a write-up and a code repository.

    2402652.0K
    3.8K followersView on X
CPE platform detail5 entries

5 of 5 entries

PartVendorProductVersionTarget SWTarget HW
OSdebiandebian_linux11.0--
Appspipspip---
Appspipspip4.2.0--
Appspipspip4.2.0--
Appspipspip4.2.0--

Explore more

Back to dashboarddebian CVEsspip CVEsdebian_linux vulnerabilities