SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects.
{ "availability": "No subscription required", "binaries": [ { "binary_version": "3.1.4-4~deb9u5build0.18.04.1", "binary_name": "spip" } ] }
{ "binaries": [ { "binary_version": "3.2.7-1ubuntu0.1+esm2", "binary_name": "spip" } ] }
{ "binaries": [ { "binary_version": "4.0.4-1", "binary_name": "spip" } ] }