CVE-2021-44123: 
Linux Debian vulnerability analysis and mitigation

SPIP 4.0.0 was affected by a remote command execution vulnerability identified as CVE-2021-44123. The vulnerability was discovered and disclosed in January 2022, affecting the SPIP content management system (NVD).

The vulnerability allowed remote command execution through crafted malicious picture files. This security flaw was one of several vulnerabilities discovered by researchers Charles Fol and Théo Gordyjan, which included Cross Site Scripting (XSS) issues that could potentially lead to code execution (Ubuntu Security).

If successfully exploited, the vulnerability could allow attackers to execute arbitrary code on the affected systems. The issue was particularly concerning as it affected multiple versions of the SPIP content management system and could lead to complete system compromise (Ubuntu Security).

The vulnerability was addressed in subsequent updates to SPIP. Ubuntu users were advised to update their systems to specific package versions: Ubuntu 21.10 users to spip version 3.2.11-3+deb11u3build0.21.10.1, and Ubuntu 20.04 users to spip version 3.2.7-1ubuntu0.1 (Ubuntu Security, Ubuntu Security).