| Name | CVE-2024-53619 |
| Description | An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3 allows attackers to execute arbitrary code via uploading a crafted PDF file. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
Non issue reported for spip, was also filed as #1088800
Disputed by upstream: The executed code is sandboxed with a limited scope and
without access to the website context.