PatchTheCVEadive vulnerabilities and fixes
Recent CVEs affecting adive, with upgrade or downgrade steps. 2 tracked.
adive has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-08-06. Highest priority: CVE-2019-14347 (score 60/100).
- CVE-2019-14347 HIGH 8.8 UPGRADE Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to cr
- CVE-2019-14346 HIGH 8.8 DOWNGRADE Internal/Views/config.php in Schben Adive 2.0.7 allows admin/config CSRF to change a user password.
FAQ
How do I fix adive vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is adive being exploited right now?
None of the tracked adive CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which adive CVE should I patch first?
CVE-2019-14347 currently ranks highest (60/100): Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to cr.