CVE-2026-48832
3.5 LOWaction/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability
Published: 2026-05-24 · Last updated: 2026-05-26
Severity and scoring
- CVSS
- 3.5 LOW
- Vector
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
- CWE
- CWE-601
Description
action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability.
Source: NVD
References
- [NVD]https://nvd.nist.gov/vuln/detail/CVE-2026-48832
- [Other]https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-4-15.html?lang=fr
- [Other]https://git.spip.net/spip/ecrire/-/commit/a22cb8a56f1e37ff3854b73ff3f66aa3df47070a
- [Other]https://git.spip.net/spip/spip/-/commit/75629034697ab52a963a340afd10930407e1cd55
Related CVEs
Same CWE
- CVE-2026-46616 — Umbraco is an ASP.NET CMS (5.4 MEDIUM)
- CVE-2026-48856 — Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive Data
- CVE-2026-45566 — Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers (6.1 MEDIUM)
- CVE-2026-53440 — Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the "from" parameter in the "Delegate to servlet container" secur... (4.3 MEDIUM)
- CVE-2026-53437 — Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenk... (4.3 MEDIUM)