PatchTheCVEametys vulnerabilities and fixes
Recent CVEs affecting ametys, with upgrade or downgrade steps. 2 tracked.
ametys has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-01-13. Highest priority: CVE-2024-30614 (score 34/100).
- CVE-2024-30614 MEDIUM 5.3 UPGRADE An issue in Ametys CMS v4.5.0 and before allows attackers to obtain sensitive information via exposed resource
- CVE-2022-50937 MEDIUM 6.1 DOWNGRADE Ametys CMS v4.4.1 contains a persistent cross-site scripting vulnerability in the link directory's input field
FAQ
How do I fix ametys vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ametys being exploited right now?
None of the tracked ametys CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ametys CVE should I patch first?
CVE-2024-30614 currently ranks highest (34/100): An issue in Ametys CMS v4.5.0 and before allows attackers to obtain sensitive information via exposed resource.