CVE-2016-7999

HIGH · CVSS 7.4 EPSS 2.30%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-01-18 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2016-7999

Severity

HIGH

CVSS

7.4

EPSS

2.30%

Original Filing — NVD Description

ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to conduct server side request forgery (SSRF) attacks via a URL in the var_url parameter in a valider_xml action.