{"cvss":9.8,"datePublished":"2026-10-24T00:00:00Z","dateUpdated":"2026-10-24T00:00:00Z","description":"SPIP before 4.3.2, 4.2.16, and \n4.1.18 is vulnerable to a command injection issue. A \nremote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request.","dueDate":"","id":"CVE-2024-8517","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"SPIP","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"SPIP SPIP External Control of File Name or Path","vendor":"SPIP"}