CVE-2026-48832 - action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability

LOW

action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability

Published May 24, 2026

3.5

LOW

CVSS 3.1

EPSS 0.28%

action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
0	affected	<4.4.15

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

Link	Providers	Tags
https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-4-15.html?lang=fr
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-31601		Advisory
https://git.spip.net/spip/ecrire/-/commit/a22cb8a56f1e37ff3854b73ff3f66aa3df47070a
https://git.spip.net/spip/spip/-/commit/75629034697ab52a963a340afd10930407e1cd55