CVE-2023-27372
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18,...
- Published
- Feb 28, 2023
- Updated
- Mar 11, 2025
- Assigning CNA
- mitre
- Evidence observed
- Jun 20, 2023
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HHigh · next 30 days
- Percentile
- 100.0%
- Model date
- Oct 17, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.
Sources
- SPIP form PHP InjectionModule
modules/exploits/multi/http/spip_rce_form.rb
Metasploit Framework modulesDeclared conditions
- platform: Linux,PHP,Unix,Windows($.exploit_multi/http/spip_rce_form.platform)
- verification: check_declared($.exploit_multi/http/spip_rce_form.check)
- SPIP - Remote Command ExecutionTemplate
http/cves/2023/CVE-2023-27372.yaml
Nuclei TemplatesDeclared conditions
- network: http($.protocol_keys)
- verification: status,word($.matchers[*].type)
This is a PoC for CVE-2023-27372 which spawns a fully interactive shell.
- spip-cve-2023-27372-rceExploit
SPIP CVE-2023-27372 Unauthenticated RCE Exploit (Web Shell Upload)
Proof-of-concept exploit for unauthenticated remote code execution in SPIP < 4.2.1 via PHP object injection in the password reset form. Provides interactive shell with CSRF token handling.
Safe PoC scanner and Docker lab for CVE-2023-27372, an RCE in SPIP CMS before 4.2.1. Verifies vulnerability via password recovery endpoint without destructive actions.
- CVE-2023-27372Exploit
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.
- CVE-2023-27372-PoCExploit
This is a PoC for CVE-2023-27372 and spawns a fully interactive shell.
- CVE-2023-27372Exploit
Exploit for CVE-2023-27372 with interactiev shell
- CVE-2023-27372Exploit
Perform With Mass Remote Code Execution In SPIP Version (4.2.1)
Python proof-of-concept targeting CVE-2023-27372, demonstrating the vulnerability and providing a local test harness for security researchers.
- CVE-2023-27372Exploit
Exploit script for CVE-2023-27372 targeting SPIP CMS, enabling remote code execution for authorized security testing and educational purposes.
Proof-of-concept exploit for CVE-2023-27372, demonstrating a remote code execution vulnerability in a web application. Intended for educational security research and testing.
Python proof-of-concept for detecting CVE-2023-27372 in SPIP CMS. Scans single or multiple URLs for the vulnerability and outputs results to terminal or file.
nuts7 · php · Jun 20, 2023
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.