CVE-2021-44122

Name	CVE-2021-44122
Description	SPIP 4.0.0 is affected by a Cross Site Request Forgery (CSRF) vulnerability in ecrire/public/aiguiller.php, ecrire/public/balises.php, ecrire/balise/formulaire_.php. To exploit the vulnerability, a visitor must visit a malicious website which redirects to the SPIP website. It is also possible to combine XSS vulnerabilities in SPIP 4.0.0 to exploit it. The vulnerability allows an authenticated attacker to execute malicious code without the knowledge of the user on the website (CSRF).
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-2867-1, DSA-5028-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
spip (PTS)	bullseye	3.2.11-3+deb11u10	fixed
	bullseye (security)	3.2.11-3+deb11u7	fixed
	trixie	4.2.14+dfsg-1	fixed
	sid	4.3.0+dfsg-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
spip	source	stretch	3.1.4-4~deb9u4+deb9u2	DLA-2867-1
spip	source	buster	3.2.4-1+deb10u5	DSA-5028-1
spip	source	bullseye	3.2.11-3+deb11u1	DSA-5028-1
spip	source	(unstable)	3.2.12-1

Notes

https://git.spip.net/spip/spip/commit/1b8e4f404c2441c15ca6540b9a6d8e50cff219db
https://git.spip.net/spip/spip/commit/fea5b5b4507cc9c0b9e91bbfbf34fe40b0bea805 (v3.2.12)
https://blog.spip.net/SPIP-4-0-1_SPIP-3-1-12.html