admin log vulnerabilities and fixes

Q: How do I fix admin log vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Q: Is admin log being exploited right now?

None of the tracked admin log CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Q: Which admin log CVE should I patch first?

CVE-2023-23721 currently ranks highest (20/100): Cross-Site Request Forgery (CSRF) vulnerability in David Gwyer Admin Log plugin <= 1.50 versions..

Recent CVEs affecting admin log, with upgrade or downgrade steps. 1 tracked.

Also searched as: adminlog.

admin log has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-03-20. Highest priority: CVE-2023-23721 (score 20/100).

CVE-2023-23721 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in David Gwyer Admin Log plugin <= 1.50 versions.

FAQ

How do I fix admin log vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is admin log being exploited right now?

None of the tracked admin log CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which admin log CVE should I patch first?

CVE-2023-23721 currently ranks highest (20/100): Cross-Site Request Forgery (CSRF) vulnerability in David Gwyer Admin Log plugin <= 1.50 versions..

← Back to latest CVEs